IIS 4.0 NT OWA -STRANGE!! PLEASE HELP

mick2767_at_hotmail.com
Date: 02/25/04


Date: Wed, 25 Feb 2004 11:22:54 -0800

IIS 4.0 NT OWA -STRANGE!! PLEASE HELP

NT 4.0 Exchange 5.5 IIS 40 SP6a - PATCHED Recently
started having OWA crash on this server. I'd reboot and
it would work for a week or so and then the same thing. I
looked in the IIS logs and for the last month or two it is
filled with successful requests to Default.asp FROM
itself? The IIS logs below show it. 10.0.0.2 is the IIS
server's IP that these log files are from. What is going
on? I just scanned it for viruses but it came back clean.

#Software: Microsoft Internet Information Server 4.0
#Version: 1.0
#Date: 2004-02-17 00:01:14
#Fields: time c-ip cs-method cs-uri-stem sc-status
00:01:14 10.0.0.2 HEAD /Default.asp 200
00:03:13 10.0.0.2 HEAD /Default.asp 200
00:05:13 10.0.0.2 HEAD /Default.asp 200
00:07:14 10.0.0.2 HEAD /Default.asp 200
00:09:13 10.0.0.2 HEAD /Default.asp 200
00:11:13 10.0.0.2 HEAD /Default.asp 200
00:13:13 10.0.0.2 HEAD /Default.asp 200
00:15:13 10.0.0.2 HEAD /Default.asp 200
00:17:13 10.0.0.2 HEAD /Default.asp 200

mick2767@hotmail.com



Relevant Pages

  • RE: Patched IIS/frontpage host compromised 7-1-2003
    ... The web pages are being reposted to an Apache server that I ... Until I know what caused the problem, NO IIS ... boxes with Frontpage installed are going back on my network. ... My difficulties lie with the logs - my IIS logs were deleted, ...
    (Incidents)
  • [NT] Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise
    ... This patch eliminates a newly discovered vulnerability affecting Internet ... in IIS 4.0 and 5.0, and could likewise be used to overrun heap memory on ... allowing code to be run on the server. ... * Microsoft has long recommended disabling HTR functionality unless there ...
    (Securiteam)
  • Re: Problem with connect computer wizard
    ... Make sure the Windows XP client is pointing to the SBS 2003 server as ... Please collect the IIS metabase and the latest IIS log files further ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: IIS Key pairs (how to export an IIS 4.0 self-issued Root CA a nd import into new IIS 4.0 box)
    ... IIS key to an Intel SSL acelerator ... it issues client certificates to the end users. ... Step I - Installing the New Server ... Install NT SP 3 ONLY ...
    (Focus-Microsoft)
  • Re: SBS 2003 After Service Pack 1 for SBS
    ... we can conclude the SBS 2003 SP1 has been applied ... Please help me collect the IIS metabase to check ... and using server management console to reproduce the problem. ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)