This looks like nimda or one of the many variants. So yes, you are
being attacked, but if you're patched up, it really shouldn't affect
anything. You could ban the ip at your firewall, but if there's a
chance you'll ban valid traffic as well.
marlon
Jim T wrote:
> What are these entries in my log files?
> am I bing attacked?
> If so how do I stop it . I use IIS
>
> /scripts/..%5c../winnt/system32/cmd.exe /c+dir 500 -
> /scripts/..%5c../winnt/system32/cmd.exe /c+dir 500 -
> /scripts/..%5c../winnt/system32/cmd.exe /c+dir 500 -
> /scripts/..%2f../winnt/system32/cmd.exe /c+dir 500 -
>
[Todays Threads]
[This Message]
[Subscription]
[Fast Unsubscribe]
[User Settings]
- RE: Simple question... Che Vilnonis
- Re: Simple question... Marlon Moyer
- RE: Simple question... d.a.collie
- Simple question... Che Vilnonis
- Re: Simple question... Bryan Stevenson
- Re: Simple question... Phillip B.
- RE: Simple question... Che Vilnonis
- RE: Simple question... Venable, John
- Re: Simple question... Bryan Stevenson
- RE: Simple log question... Jim T
- RE: Simple question... Marlon Moyer
- RE: Simple question... Venable, John