I have the same thing. Only my problem is that it kills my connection Any ideas!!! Got ADSL connection.
TIA Carlo [2002-05-11 13:28:29] WARN: HTTP [195.202.66.125]: Invalid URL name (.. not allowed): /scripts/..%5c../winnt/system32/cmd.exe [2002-05-11 13:28:31] TRACE: 62.2.214.114 - SMTPD connect received. [2002-05-11 13:28:32] WARN: HTTP [195.202.66.125]: Invalid URL name (.. not allowed): /_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe [2002-05-11 13:28:33] TRACE: 209.51.142.138 - SOCKS Proxy received. [2002-05-11 13:28:34] TRACE: Thread-Pool Worker spawned... [2002-05-11 13:28:34] WARN: HTTP [195.202.66.125]: Invalid URL name (.. not allowed): /_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe [2002-05-11 13:28:38] WARN: HTTP [195.202.66.125]: Invalid URL name (.. not allowed): /msadc/..%5c../..%5c../..%5c/..� ../..� ../..� ../winnt/system32/cmd.exe [2002-05-11 13:28:38] TRACE: Thread-Pool Worker terminating... [2002-05-11 13:28:40] WARN: HTTP [195.202.66.125]: Invalid URL name (.. not allowed): /scripts/..� ../winnt/system32/cmd.exe [2002-05-11 13:28:44] TRACE: 209.51.142.138 - SOCKS Proxy received. [2002-05-11 13:28:48] TRACE: Thread-Pool Worker spawned... [2002-05-11 13:28:48] TRACE: 24.26.81.208 - SOCKS Proxy received. [2002-05-11 13:28:51] WARN: HTTP [195.202.66.125]: Invalid URL name (.. not allowed): /scripts/..�/../winnt/system32/cmd.exe [2002-05-11 13:28:53] WARN: HTTP [195.202.66.125]: Invalid URL name (.. not allowed): /scripts/..��../winnt/system32/cmd.exe [2002-05-11 13:28:55] TRACE: 209.51.142.138 - SOCKS Proxy received. [2002-05-11 13:28:56] TRACE: Thread-Pool Worker spawned... [2002-05-11 13:28:56] WARN: HTTP [195.202.66.125]: Invalid URL name (.. not allowed): /scripts/..��../winnt/system32/cmd.exe [2002-05-11 13:28:58] WARN: HTTP [195.202.66.125]: Invalid URL name (.. not allowed): /scripts/..S5c../winnt/system32/cmd.exe [2002-05-11 13:28:59] TRACE: Thread-Pool Worker terminating... [2002-05-11 13:29:00] WARN: HTTP [195.202.66.125]: Invalid URL name (.. not allowed): /scripts/..S5c../winnt/system32/cmd.exe [2002-05-11 13:29:03] WARN: HTTP [195.202.66.125]: Invalid URL name (.. not allowed): /scripts/..%5c../winnt/system32/cmd.exe -----Oorspronkelijk bericht----- Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Namens Alex Broens Verzonden: zaterdag 11 mei 2002 11:23 Aan: [EMAIL PROTECTED] Onderwerp: [sambar] Access log entries {02} At 10:59 11.05.2002 Dave Culbertson wrote: >I am being accessed by quite a few computers with the same or simular entries and would like to know the name of what this is. Thanks. Dave, Its Nimda or CodeRed red attacks... nothing to worry about unless you run an unpatched IIS :-) More details under: http://www.sambar.ch/arch/msg16009.html Alex ------------------------------------------------------- To unsubscribe please go to http://www.sambar.ch/list/ ------------------------------------------------------- To unsubscribe please go to http://www.sambar.ch/list/
