Re: code red goes on

[Mike Egglestone <megglestone@heritage.sd57.bc.ca>]

Thanks for the responses...

Hehehe... I changed an NT 4.0 Server to a REAL server about
2 months ago... (Potato r3) ... put in apache, samba etc.
I think it was using MS II...(is that what NT uses?)
I'm not sure though...
I know very little about NT... I guess thats why I changed it 
to something I'm more comfortable with.....


Anyway.... PHEW!!






Quoting Dave Carrigan <dave@rudedog.org>:

> Mike Egglestone <megglestone@heritage.sd57.bc.ca> writes:
> 
> > I grepped my access logs and noticed the "default.ida?NNNN etc etc..
> > 
> > What does this mean?
> > Have I been attacked? or was it an attemped attack?
> 
> You were attacked. Unless you are running an unpatched MS IIS server,
> you did not succumb, so you don't need to take further action.
> 
> -- 
> Dave Carrigan (dave@rudedog.org)            | Yow! An INK-LING?  Sure --
> TAKE
> UNIX-Apache-Perl-Linux-Firewalls-LDAP-C-DNS | one!!  Did you BUY any
> COMMUNIST
> Seattle, WA, USA                            | UNIFORMS??
> http://www.rudedog.org/                     | 
> 



~~Bill, Bill who?~~