Re: Urgent please!!!
- From: "Todd Raymond" <traymond@xxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 13 Feb 2002 22:50:57 -0800
someone is scanning your IP - most likely a script-kiddie running scans on
your network block...
-Todd
----- Original Message -----
From: "Vinaykumar G" <G.Vinay@xxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, February 13, 2002 10:41 PM
Subject: [isalist] Urgent please!!!
> http://www.ISAserver.org
>
>
> Hi All,
> Iam using ISA server in Integrated mode and have published some
> webservers behind it and I reguralry check the ISA logs and strangely I
> found the following
> entries in my ISA log............ What are these entries? please let me
know
> urgently............
>
> anonymous w3proxy ISA
> http://www/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir - -
> 401 - - -
> -anonymous GET
> http://www/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir - -
> 401 - - -
>
>
> Regards,
> vinay.
>
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
traymond@xxxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
