Full Disclosure mailing list archives
Need help to find web server attacks signature
From: "Maxime Ducharme" <maxime () pandore-design com>
Date: Wed, 22 Oct 2003 13:40:27 -0400
Hi all,
i'd need help to identify an attack that happened on one of our
customer's web server yesterday, I put the log file here :
http://www.pandore-design.com/security/2003-10-21-IIS-attack.txt
I see some attacks that seem to be a security scanner tool,
and some attacks which targets specific pages of the web site
(where we begin to see 200 responses from the web server).
Someone recognize a tool / virus / worm in this ?
Thanks in advance for help
---------------------------------------------------------------
Maxime Ducharme
Administrateur reseau, Programmeur
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Fun with /bin/ls, yet still ls better than windows Georgi Guninski (Oct 22)
- Need help to find web server attacks signature Maxime Ducharme (Oct 22)
