RE: More Log info from the Nimda
- From: "Peter J. Persing" <Peter@xxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Tue, 18 Sep 2001 19:54:40 -0600
Mine get bounced with a 12202, but I sure as hell am getting a lot of
them!!
Pete
On the Blackfoot River in the great state of Montana
-----Original Message-----
From: Troy A. Wilfred [mailto:twilfred@xxxxxxxxxxxxxxxxxxx]
Sent: Tuesday, September 18, 2001 7:40 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] More Log info from the Nimda
http://www.ISAserver.org
All the locations that were created by Code Red!
80 GET /scripts/root.exe /c+dir 404 -
80 GET /MSADC/root.exe /c+dir 403 -
80 GET /c/winnt/system32/cmd.exe /c+dir 404 -
80 GET /d/winnt/system32/cmd.exe /c+dir 404 -
If your patched you should be getting these 40x errors in your IIS log.
Troy
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
peter@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
