Michael
Mon Aug 08 09:12:02 CDT 2005
So would you think that since I'm getting this from other addresses as well,
that it may be a similar tool being used? Should I be sending emal to the
@abuse for each of the IP's attacking? I think I'll keep monitoring and send
notification if they persist.
"Robert Moir" wrote:
> Michael wrote:
> > I keep getting hit on a 2000 is5 server for pages that don't exist on
> > my machine why would I be getting these requests. They are from
> > diffrent sources.
> >
> > GET /Help.asp |-|0|404_Object_Not_Found 0
> >
> > GET /MSOffice/cltreq.asp
> > UL=1&ACT=4&BUILD=4219&STRMVER=4&CAPREQ=0|-|0|404_Object_Not_Found 0
>
> Hacking tools looking for weaknesses, would be my guess.
>
> Don't worry about it too much, provding you're locked down and patched and
> everything. These days having hackers probe any service you put on the
> internet is a fact of life.
>
> --
> --
> Rob Moir
> Website -
http://www.robertmoir.co.uk
> Virtual PC 2004 FAQ -
http://www.robertmoir.co.uk/win/VirtualPC2004FAQ.html
> Kazaa - Software update services for your Viruses and Spyware.
>
>
>