To add to the others, using URLScan from Microsoft (http://www.microsoft.com/security/) will keep these requests from ever hitting your IIS and the logs will be much cleaner.
Jeff To: [EMAIL PROTECTED] From: "Paul Sumner" <[EMAIL PROTECTED]> Subject: [analog-help] Deciphering Hack Attempts Date sent: Mon, 08 Jul 2002 05:02:27 -0700 (PDT) Send reply to: [EMAIL PROTECTED] > In my raw logs I find several entries, such as: > > /scripts/root.exe?/c+dir > /MSADC/root.exe?/c+dir > /c/winnt/system32/comd.exe?/c+dir > /d/winnt/system32/comd.exe?/c+dir > /scripts/..%255c.../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir > > Etc. Etc. > > Are these hack attempts? If not, what are they? > Should I assume that my webhost is blocking these > attempts? > How would I recognize if an attempt is successful > (other than seeing profanity on my website)? > > Thank you! > Paul Sumner > > end > > > Provided by Pepperdine Alumni Association - > http://www.pepperdine.edu/alumni. Pepperdine University - > "Strengthening Lives for Purpose, Service, and Leadership" > +--------------------------------------------------------------------- > --- | This is the analog-help mailing list. To unsubscribe from this > | mailing list, go to | > http://lists.isite.net/listgate/analog-help/unsubscribe.html | | List > archives are available at | > http://www.mail-archive.com/analog-help@lists.isite.net/ | > http://lists.isite.net/listgate/analog-help/archives/ | > http://www.tallylist.com/archives/index.cfm/mlist.7 > +--------------------------------------------------------------------- > --- --- [This E-mail scanned for viruses by Declude Virus] > > --- [This E-mail scanned for viruses by Declude Virus] +------------------------------------------------------------------------ | This is the analog-help mailing list. To unsubscribe from this | mailing list, go to | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | List archives are available at | http://www.mail-archive.com/analog-help@lists.isite.net/ | http://lists.isite.net/listgate/analog-help/archives/ | http://www.tallylist.com/archives/index.cfm/mlist.7 +------------------------------------------------------------------------
