Niels,

-----Original Message-----
From: "Niels Poulsen" <[EMAIL PROTECTED]>

> I went out of bed this morning, made a system check on my server..found
> this
> in my logfiles
> 235 130 "-" "Microsoft-WebDAV-MiniRedir/5.1.2600"
> 212.199.178.234 - - [11/Dec/2002:09:10:40 +0100] "PROPFIND /admin$

It looks like an application on a Windows XP client is sending a WebDAV 
propfind method (e.g. extended HTTP1.1. method to get resource 
information) to your web server using the WebDav file system redirector 
which is incorporated directly into Windows XP. More than likely, the 
client is not using a web browser but some other Windows application, like 
Web Folders, to access a resource on your web server.

I'd say he's looking for holes to get in via the hidden "admin$" share

Alex
-------------------------------------------------------
To unsubscribe please go to http://www.sambar.ch/list/

Reply via email to