This looks like nimda or one of the many variants.  So yes, you are
being attacked, but if you're patched up, it really shouldn't affect
anything.  You could ban the ip at your firewall, but if there's a
chance you'll ban valid traffic as well.

marlon

Jim T wrote:

> What are these entries in my log files?
> am I bing attacked?
> If so how do I stop it .  I use IIS
>
> /scripts/..%5c../winnt/system32/cmd.exe /c+dir 500 -
> /scripts/..%5c../winnt/system32/cmd.exe /c+dir 500 -
> /scripts/..%5c../winnt/system32/cmd.exe /c+dir 500 -
> /scripts/..%2f../winnt/system32/cmd.exe /c+dir 500 -
>
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to